last executing test programs: 5m53.575911949s ago: executing program 2 (id=561): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x5, 0x8}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000080000000000e4986919", 0x28}], 0x1}, 0x0) 5m53.575294304s ago: executing program 2 (id=562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000380)={0x0, 0x7a, 0x1, 0x2, 0x5, 0x9, 0xfc, 0x7, 0x7}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)=0x1) 5m53.411690912s ago: executing program 2 (id=563): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f00000000c0)=""/28, 0x1c) getdents64(r2, &(0x7f0000001f80)=""/4104, 0x1008) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000240)) sendmmsg$inet6(r3, &(0x7f0000002e40)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x2, 0x931766f6319eed40) 5m52.950473958s ago: executing program 2 (id=565): unshare(0x2040400) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000000000)=""/74, 0x0, 0x1000, 0x9, 0x2}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x100f4bf, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x90000) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r6 = syz_open_dev$mouse(&(0x7f0000000240), 0xfffffffffffffffc, 0x105000) getpeername$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r7 = socket$l2tp6(0xa, 0x2, 0x73) fsetxattr$trusted_overlay_redirect(r7, &(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8, 0x2) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x38}, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r8, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffe}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x24}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r8], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 5m51.93909057s ago: executing program 2 (id=573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWOBJ={0x64, 0x12, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_DATA={0x50, 0x4, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7a5c}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}], {0x14}}, 0x8c}}, 0x0) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x1, 0xbe, 0x86, 0x6d, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x3, 0x9}}]}}]}}]}}, 0x0) syz_usb_ep_read(r1, 0x1, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x258a, 0x6a88, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x9, 0xbd, 0x1, {0x22, 0x45e}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x81, 0x38}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x9, 0x8, 0x5, 0x40, 0x8}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x3, [{0xe, &(0x7f0000000140)=@string={0xe, 0x3, "645e13fd01d873a8d26db85b"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x401}}]}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x90, &(0x7f0000000240)={[{0x8b, 0x4e00, "1d3b956a9cf386708256d0d330b4ad46d1582f132b8a7e7990f88fc65a5eef096a25cabdbcfd3f1c766d36d834f80cba58369c191de738669451a8c2b8ad4bd262274c10d4f65777386886b8359dc08bb9f53f93608d18299a72cee743b135bf75d0b3f07903984ba8894c0eaaa75dac1563df8132eba5c3e00c5ed9e0c7b57fda06be207c5124a2334011"}]}) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000008c0)={0x14, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0010000003"]}, 0x0) 5m51.634369128s ago: executing program 2 (id=575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff3, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x10000000, 0x3, 0x4}, 0x1}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a38000000060a01040000000000000000784be2620200000024000480200001800a000100"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) 5m51.1434228s ago: executing program 32 (id=575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff3, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x10000000, 0x3, 0x4}, 0x1}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a38000000060a01040000000000000000784be2620200000024000480200001800a000100"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) 7.250642291s ago: executing program 4 (id=1917): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000480)="9327b2635bccd3c3e409869943df2225b3f35abed524ade56c98b401e02ba7df5df603c79a50ae449b8e5bc996542c72a0a0d53beece3216eea0e7d9bfee460dab2f888dd5397da95b85e49d7151f2860bb55278c2204e35f1065553dbce20faf75f40f7eb63e18890a3810b9caf6e44fc95afe85de1d14c732b9b4604c6bd31fe349f43db3bc9539e5d3d0b520d6aa2c76832546ce29bd45c34795caa38583ee623f05189ccd29148b8938c3ed770861f4ca18058699550d01e7e97a164e7be7cfd732d02995452481250f7cda10b3adaa14a065de645", 0xd7}, {&(0x7f0000000580)="bcfbd8e3cbdcc6f7197815cd496e339955221a3df7360e7f081af97ae6db8a4837788bf2b216083c549150024543161a9a6ea3e24cc3726c913ff78976215ed9077a1cd16081be6123095c409619cb0d69847a740195d0a0ae530072ba5a526702746099da85de38f0f9cd6a6e8ecddd0b60a082a7214f16adcd94c87fdd9652677f93aed66545a5172c1f6a46ab9be43d443449d530a4264deddb519298d41d8020c432c3a127d78833e65bfee1d0b84c8d62c7afd54193880410a4cd1410827615918f01b7856217b4ec71b162522ceb4da5cdf50e1aba994621feab0bb31a0189683d2c267cdd2538671b0547b5cd65e73480b3f024c8b78e23e9ae9ffb1dc06859c954f1ba36731bd51996b5ce37f4417b0f962c8fd886d870a29a05988cdb1ca912c6850481ffd1ce0e19f585e0e9cb80eb8af3fc4b586b1e6f3952ed2910189b21f417d6eea142f66018380d1145d44763c0ed3b9def435bceb309b5f6d4e8f9f998cbdb02849ae00c070c715c22919c5774430c9c8f27523751406512b9ccf14d593b48027a099a688c64e71cebaa5fb5d389589f63ec51cc4fb24450e61d6fdb293227a7eee73d89962e2730e71774f1a56342fd1376021971ec81b8910b7ca9d45a04c9205e3e8d4d299af41fe76684150c6dd8dad9d43aa7a269a87fc61bc5c8ed6d5bb285a902873caf34259e39d78228bc2cc6821a3867797351136aaef2b2b224c40b92caed3d4dfc39291376c46b1b5aed8adffd70eef2e947949f79d44e7c5080290fa44334e2be2b191af41a99e5d2a502583a645fea1304788a3068a907f170795a0473c281643e21ddb9a75cceb921f4ff293bbab69dc90d1db8133f87e555160511a43ce6a30a19ee25f02fa74ae41d7d14c6e89254a9d5ae834f6e7c7f612ddf2a977b675b00805caf3d11cca7da4271921089ea3dee96077cbf3792ea7ca9bf2ce7e51bc0add461927171fad2d6fbef5af8e3e89529a448b14e76839c32f7e0e170a73eca8d18318d23ca2371b297b527bd6be37b0174b2963ce95bb28404f9441be64287a6ecb310f0f56c14ba488dd63c9b5b5a3055ead0fc78aa004560acdd18193731bfdf76315dc7f445adc81b3797024dcf724ebba3787cf17e71a17751aed2411ed595396c6ee26937e9c64b0e504ee7fcbfb48157204116c3f8dd697440ab14b779ecad0be458cecfa9fe9d44b312be9f25a67ba60d9917052c3cc918bff089ee910a882c4e40cf5f6b2d87a7abaad5737e27c201eb7633284ab5ec8c2ebb6d723d7556990e436bc8d7cd4b4f63e969916b181b7ea355e8ba491c39d1ab4897fc83c3de6a3dad7330dac0058ee0f09a119495ce5a2b3c4dfd5770dbfc62055545b8bb419f2592831f2b5a491832b10c508459097fe75f1326ebbb311db322520066acd3676ac542fb167156c693cd2b936ec45b8f3a231c1402a186166d6ac28c4147c9db755fbaa713bb62c54e059bf0c3ca5b1f05b8ccbe660c06a985c09c42ef5ab43fb984e9c9584b75b2f8513be99e9cb0ff345c4fc4e96f704e958dfe1b215dee59d949fe42897af7a2dbb91f66cbe39b9fbd967d92db3cc88a81010ff7c9381c401229f3048f0c393a07b1dad18230845c7bcb904f897ad2cadb8d68008c981cdd9ad149d82aa3f050eb19cf71eac8a5bf431534db4132d2bf11e54ea7b249d1c3da720e09af4845758c61e66109a07bf1aac592c846dfd1aacbc693a52a83bbbe89d287311ad484a1e4f459fe1b663f910ea211e54d0b84e193990c0cd0e1094790b306ed685d4d42a79e6041966d29939ffcb0bea5d69e3dacaf8ed867cf56cd0035f5f20ff2fc7efa5500ec3089f91852f9fbed9ef49cd26d8dd02808f5587fea29297e551b33c414693c9db7a1f1f12814376ece529090993bd8e2d551ada1f5a1700a0c7646ace9f1e72e700b2dead1844943a2365810bb13ebde454114f866b2db2b5bf773608ccfd1824684dc94bc03a765a5075de80c48d0b066bc9df33fe4027a15d4882319c38927b50ef03c1fb19541b6941730fc00d0485e97d3891711e5dedade7686d1cf85744e2ef0df5df1773b46796105661650776c92cdca327925fdf6ce877c54a03912cded84a735bcfad2e60760b35c5166977372ff4dd4796ae9b2995ae8cbfc2b7825ec5fac9c786e500aa22ff98b3e9ae30575d86640122c8b7faa647e2e46c0236e3629810a4d324c63ebee5e834f9bb8a772291faad5192647e80ccf8379dd548211743fdefd5014398739e6e76769a24a8b095bb76b104edf2418235ec4cf46a631e0e7c412b573ac928db317ac7d28763ae7a3498b2b5dff05fca7155704aea9a1611ab13270413762a0f9212812c0ddfbc39519a6cd00b11bb9563948316e4d17bbd24f8ea8ece985231eb017dfab85a367ca861df41fbcae36f3ea1b669c2bf936911f94a4c01aa269f887e0c74ead6a6e020950f607477fb368b640e7d2a8f0ee4995c2c8af77c9986309bca1c6abe9cb1f797f952575d7574bcc2cc35160183143630955ac1c85586cce1aa4ddc1f7b03a1fab821d994f17bb5b71a0a4848067822bd2da736b50543045c2eceba62af4b353917e4c21e78cd352dd4db61ee60337c1bcbb6632cccaa0689086ae358b5905f3e5ebb97187c9e08547a90010731ea8576729b5247d62c4d2ec9d3716fdfee11cba04c565a81188091899aeb26f53399c4579ca519cd76934e57f0ca401204b43dab0c65d6a27b5625dc6c962ceececaa51149b5241ab5392122b06c0fab9b173c099b5622f320c0f984550b7b28d384ecf61965614bef207d5faacdd3ff29d43fbbfffb78e03f6c759630dd389ff2a06b1b69b0ea568c0b087f14e8f46e32e2d983cde8400ecb12693e456d49b26ead10ec04cba8c08544c9c7421e833a1485448e72f8b920b293c538ef20bb1d70d2c96e7c896fa547dd2abe90c36524a99fb51cfd141f3cda9d07ed5bad92bd12a704e646553829be925b975c1281e34d8b12ca66e008cb5959d9308ab9b9538f57e6135f55ba080551f1f2aae75e9d95eba84f3a95f89fb910b930f0b6d407e082e4f0768b1540795d8a4d04021db8efd0fb56cc0b25d6b5be21239021e1941ff4993efea4d96510e1ccc0011546b29a357ba9ff3c06b6509176158d137a1e27dc329334547f0e24ab98dc1bb8a9e56d7c4792c619c52bbd34a0b84a34d3f59a3cfb43df7625887241fd9194008961e19d0d4b267b6c8fba109e2f63e654b1833bcd6842563a71e9cc8053e69fa3b65ad07c52e7dfaf080f26fb2399f1b1fc5c1ddf90901d1f58b930a03a23b5d79b4e05e229e2f4849630bbeba7d91fc259be05bc400479ad956d766724580a4a44b4ba90573d93cabce6715e80ad5d9596197e106d9c2f358f983b04171c9a24bcf57a1007ece45725cdbc6bfc4ae2fdc6b053195f75efab4b94154f87fb63662f3d19aac9c29503e275972265aef27241350baca1c9e8d7dfed4ec69c06f8d771e35e4344c60711776d656c6cc11847314810b816fc371233038f6b4986fce3682fe38c8ef99ed5978ec62523b732bddd7f21d3d437efd73bbf0b9c91728a46d8a9d7d807a9a61890dea82e5a37c0ef482c86be57005a9621b8db334e8b7381efc8bf3558be75595b42e350e56f51c8874b37c695c8491b8e387c8695e16df0dbc", 0xa32}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x5) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fcntl$getown(r3, 0x9) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000140)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0xf, 0x8, 0x7, {0x4e24, 0x4e22, [0x3, 0x6, 0xffffff01, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0xde, 0x7fffffff]}, 0x2, 0x3}}, 0x4c}, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 7.138365242s ago: executing program 1 (id=1918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000200)={{0x43, 0x2}, {0x5, 0x7ac}, 0xffffffff, 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x2) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000280)={@tipc=@id={0x1e, 0x3, 0x1, {0x4e21, 0x2}}, {&(0x7f0000000140)=""/80, 0x50}, &(0x7f0000000000), 0x40}, 0xa0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x10c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xdc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0xc, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xa4, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x0, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x0, 0x3, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 7.05767219s ago: executing program 4 (id=1919): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x1091a1) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x8, 0x2003) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x0, 0x43, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x1b, {0x4e22, 0x4e23}}]}, 0x24}}, 0x0) 6.995757131s ago: executing program 1 (id=1920): socket$kcm(0x2b, 0x1, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xa439, 0x80, 0x800002, 0x23b9}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r3, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r6, r3, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 6.820820165s ago: executing program 1 (id=1921): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000084efbb0dee8bb3e7d7b135832f7a967c250aa3f3756a122786fe730a0b80088aeccd9f0893f1588062da9cd8132ed004028828585f78f5e12258c681737d7d88d9afd4d2bde6371b45a86ad0f908b6f060418cb29656510167b93e87170e7f15a17a8e", @ANYRES16=r5, @ANYBLOB="010000000000000000003d0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000c8ff82006c325f64726f7073000000000500870000000000"], 0x4c}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000003bc0)={'\x00', 0xbe4f, 0x0, 0x7, 0x9, 0xed8}) sendmsg$nl_route(r1, 0x0, 0x24040040) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = fsopen(&(0x7f0000000340)='ocfs2_dlmfs\x00', 0x1) fcntl$setflags(r8, 0x2, 0x0) r9 = dup(0xffffffffffffffff) r10 = syz_io_uring_setup(0x94e, &(0x7f0000000340)={0x0, 0x8d2dc, 0x0, 0x1}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r9, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r10, 0x47f5, 0x0, 0x0, 0x0, 0x0) 5.94201639s ago: executing program 4 (id=1925): futex(&(0x7f0000000100), 0x3, 0x2, 0x0, 0xfffffffffffffffd, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x2404818c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x1, 0xb4b, 0x9, 0xb, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x200200, 0x114) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x1, 0x2, 0x1}, 0x48, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000200)="240000001e005f80004000000000000003000000000000000000080008000100000000ff", 0x24) sendfile(r4, r3, 0x0, 0x4) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x6) recvmsg$can_bcm(r3, &(0x7f0000000240)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)=""/189, 0xbd}, {&(0x7f00000002c0)=""/11, 0xb}, {&(0x7f0000000580)=""/79, 0x4f}, {&(0x7f00000006c0)=""/153, 0x99}, {&(0x7f0000000780)=""/173, 0xad}], 0x5, &(0x7f0000000840)=""/173, 0xad}, 0x40002000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000280607ee622", 0x2e}], 0x1}, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/udp6\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0xab416000) r8 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) 5.882618452s ago: executing program 3 (id=1926): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '[\v\xdb\x06\x00\x00\x00\x00\x00\x00\x00\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x00\x00\x80\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xcc\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8cI\xdcn\x9b\xa5\xd4\x13\xc0\x82^\x10,\xfa\x88\x93\xc6K2\xf2\xce\x95\x1bG\xb2m\xad\xe7\xd1P.XT\xc1\xc5\xd9\xaf\v\x8d\xcf\x8f`{F\xc7\x95!\xcc\vq0\xd0\x80\x06{\x97\xb0\xdb+Z\xc5\x9d\xf4\x0eS\xd2\xd4\xb5\\\x96\x1dN\xe6\xfd\\\xe32_p\xee\x15JU\x11\x1f\xc6\xeb\xafm\x1e\xb3\xb5\xfe\x02\xe24\x90Uo\xaf\xce/\x9c\xd4\vE \x81\x14\xdf\x9b\x12b\x1a\x173\x8d\t\xab\xec\xf0n\xa5\x95\x9c\xc3\xf2\xb6CS\xf3\xa8p\t!\xb3\x912`\n\xd2\xe2S\x9cU\xcc\"\xf2d(Ec\xb2\x7f\x02'}]}, 0x130) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x2, 0x1, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2}) readv(r2, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close(r2) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000580)={&(0x7f0000000140)="fbd75bf64e1c900e8ca79e23f093f3530c0a496405426a97b4a06b6fb9aba9293b8c1f492ee24e6434f39a63130c58f584d84418a1eaab574d755a6927b40b9145aaf513c861e4c57873a993c42199c248e1f57701fd7b62587b3c8d2cb19b6a30ca78d195b23bbfbeac745b6d3d334aa2e23340acaec67536fa5356de29c9cb1476320a88ccd5ac2b4a91f0d91576992ffec9757237527faa84fc76a27f708bc65d20df32327a3aef79b2d92331f2681a291a6bc8690ed8b294628ea7841679d2fe648191ba0c22a4cf4a0a59f89d278960969fb699ec", &(0x7f0000000340)=""/221, &(0x7f0000000440)="5bc6f6fc6dfa7f0725e9aec013e6d7154213ed47193971e24a81659edf689700a45931db506c84af4e52e9dba09a51", &(0x7f0000000480)="98aca29c51074421cc5ab22e7a97523d75ff185a0f8ffac8cc5a7cd0d76656321b1572c0db46c995272963c3bfcf36428dff631d72b62363aa9e6a3719e0d4ddc52305a12b5e8b2f2e9d95176ff0fb4e7545b39cccc26a47bb166fdc95093daaddf9eb4ee21f47bc1762cf35f5b512a2ff5442d6613675eb69a7022e7b3eeaf8cecc4c87caa7f78b137f676a1be450c3566b782d47999d5a4938b7358ac2ed5d3b3f240c20823f771a6f9e36143c57637c72ef42c97d7169f651263869da56e136354eefc03446fafd7377793d52c8832b", 0x10001, r2}, 0x38) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, r3, 0x0, 0x5b6c027b, 0x1000000000004}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r3, 0x0, 0xfffffffffffffffd, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0xfe14, 0x2, r3, 0x0, &(0x7f00003bf000/0x1000)=nil, 0x1000, 0x7e}) 5.49151608s ago: executing program 3 (id=1927): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x5, 0x8}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc000000000000fff50000000000000000e4986919", 0x28}], 0x1}, 0x0) 5.466634001s ago: executing program 3 (id=1928): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) ppoll(&(0x7f00000001c0)=[{r1}, {r1, 0x10}], 0x2, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000f00)={0x84, 0x0, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) write$cgroup_pressure(r2, &(0x7f0000000100)={'some', 0x20, 0x4, 0x20, 0xffffd}, 0x2f) close(r2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000140)={0x6, 0x80000000, 0xffff, 0x9}, 0x10) 5.394523773s ago: executing program 1 (id=1929): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000440)={0x5}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x6) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000014}) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r6, &(0x7f00000008c0)=ANY=[], 0x258) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r6, &(0x7f00000012c0)="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", 0x94c) 4.733463479s ago: executing program 0 (id=1933): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) ppoll(&(0x7f00000001c0)=[{r1}, {r1, 0x10}], 0x2, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000f00)={0x84, 0x0, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) write$cgroup_pressure(r2, &(0x7f0000000100)={'some', 0x20, 0x4, 0x20, 0xffffd}, 0x2f) close(r2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000140)={0x6, 0x80000000, 0xffff, 0x9}, 0x10) 3.744936887s ago: executing program 1 (id=1937): syz_open_dev$vbi(0x0, 0x3, 0x2) add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x28000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) write$USERIO_CMD_REGISTER(r4, &(0x7f00000002c0)={0x0, 0x9}, 0x2) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r3, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x5, 0x3, 0xb8a}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_io_uring_setup(0x837, &(0x7f0000001200)={0x0, 0x679a, 0x80, 0x6, 0x178}, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x0) 3.285485631s ago: executing program 5 (id=1938): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x5, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000001240)={0xfe, "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"}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7f}, {}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xc1, &(0x7f00000001c0)=""/193, 0x41100, 0x58, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xfff, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x5, 0x1, 0x7, 0xf}, {0x5, 0x4, 0x5, 0x1}, {0x1, 0x4, 0x10, 0xc}, {0x1, 0x5, 0xe, 0x8}, {0x1, 0x1, 0xb, 0x7}, {0x4, 0x4, 0x1, 0x2}, {0x1, 0x2, 0xe, 0x13}, {0x2, 0x4, 0xb, 0x7}], 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440)=r2, 0x4) 3.138471073s ago: executing program 5 (id=1939): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x5, 0x8}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc000000000000f5ff0000000000000000e4986919", 0x28}], 0x1}, 0x0) 3.015554662s ago: executing program 5 (id=1940): utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='2'], 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) io_setup(0x0, &(0x7f0000000000)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xe739, 0x1, 0x8000002, 0x1d4}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r4, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$nci(r4, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000002d40)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x8, 0x28d662, 0x1096e}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) 2.677057119s ago: executing program 1 (id=1941): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0c20d3945911392f48170b", @ANYRES64=r0], 0x34}}, 0x20008800) r1 = syz_usb_connect(0x6, 0x4a, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES64], 0x60}}, 0x40) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @local}, 0x1c) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000480)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f0000000240)=0x10) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000b00)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000140)=0xf565, 0x4) socket(0x1a, 0x2, 0x8001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x200000000000011, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x9}, 0x8) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r10 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 2.494802695s ago: executing program 4 (id=1942): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000000)={0x10000, 0x800, {0xffffffffffffffff}, {0xee00}, 0xc, 0xffff}) prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtfilter={0x42c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r7, {0xf}, {0x0, 0xffe0}, {0xfff2, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x400, 0x2, [@TCA_U32_SEL={0x294, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x4, 0x400000, 0x0, 0x2}, {0x4800, 0x1, 0x1ff, 0x3}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x0, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x5c4, 0xc, 0x6, 0xc}, {0x2, 0x8, 0x2}, {0x7, 0x8, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x2, 0x0, 0x100, 0x6}, {0x227, 0x6, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x4}, {0x4, 0x5b61, 0x0, 0xe37}, {0x7, 0x2, 0x6, 0x6d}, {0x1, 0x6, 0x6, 0x3ff}, {0x7, 0x1, 0x401, 0x9}, {0x8, 0x100, 0x7, 0x3}, {0x3, 0xc, 0x5, 0x6}, {0x81, 0x9, 0xf3b8, 0xffff7fff}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7f, 0x7f}, {0x2, 0x81, 0x80000000, 0x8}, {0x80000005, 0x7, 0x6, 0xe0}, {0x0, 0x8, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0x8000, 0x7}, {0x7, 0x200, 0x8, 0x400}, {0x0, 0x7f, 0x8, 0xa}, {0x9, 0xd, 0x7f, 0x8000}, {0x7fffffff, 0x52, 0xd6fa, 0x5}, {0x5, 0x6, 0x2, 0x8}, {0x9, 0x9, 0x7ff, 0x9}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0x3, 0x6, 0x401}, {0x400, 0xaef2, 0xffff, 0x1}, {0x10001, 0xfffffffb, 0xfffffffa, 0x1ad}, {0x2, 0x4, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x154, 0x5, {0x13, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x5, 0x3ff, 0x3, 0x4}, {0x80, 0xd036, 0x57, 0x8000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0xfbcf, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x3ff}, {0x7, 0x7fff, 0x2, 0x40}, {0x8, 0xfffffff9, 0xfffffffa, 0x2}, {0x49f, 0x7, 0x81, 0xb}, {0x5, 0x9, 0x2}, {0x1000, 0x2, 0x20264, 0x9}, {0x3ff, 0xd, 0x3, 0xa6e}, {0x6, 0x8, 0x2, 0x1}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x7, 0x5d14, 0x7f, 0x72}, {0x7, 0x2, 0x7, 0x7}, {0x7fff, 0x5, 0x401, 0xc42b}, {0x80, 0x3, 0x2, 0x1e0}, {0xffffffff, 0xa67, 0x7f, 0x80}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x42c}}, 0x24040084) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$l2tp6(0xa, 0x2, 0x73) r8 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611084000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x3}, &(0x7f0000001240)='\x00', 0x0) socket$inet(0x2, 0xa, 0x7) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2", 0xc, 0xfffffffffffffffb) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x50bd2f, 0x25dfdbfe, {0x60, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xb, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x3004408c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x11e8b000) 2.222518971s ago: executing program 3 (id=1943): syz_open_dev$vbi(0x0, 0x3, 0x2) add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x28000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) write$USERIO_CMD_REGISTER(r4, &(0x7f00000002c0)={0x0, 0x9}, 0x2) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r3, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x5, 0x3, 0xb8a}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_io_uring_setup(0x837, &(0x7f0000001200)={0x0, 0x679a, 0x80, 0x6, 0x178}, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x0) 1.634251942s ago: executing program 0 (id=1944): rseq(&(0x7f0000000200), 0x20, 0x4000000000, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc6fffffd) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000580)={0xc, {"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", 0x1000}}, 0x1065) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) write$dsp(r2, 0x0, 0xfffffffffffffcb7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="2000000000000000180a02000000000000000000000000009500000000bb0000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x65) 1.462923002s ago: executing program 4 (id=1945): write$nci(0xffffffffffffffff, &(0x7f0000000000)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x1, 0x3, 0x0, 0x90, "853c39e4a09bac984dd48c2caa1a8b78be00db3f22fcfab71f253ec4c7cd1f6ada14071b8d96b79dd834907ddd1bd1efb1d2ef89d9798db50062344824941cbe02e969627fb8fc3350ddada76699db61d530081594f3a90e4ae65bdffc04dfa2fa28995b1c2f999cd3fe5a23922c147c03ced6c9abaadce3280be9fd382b021a49748525971c4399ceae6e2df46e43659849a0ee45f2d97556cb8ba734f71111e35b3cfef0e35e1bf40bcb906fa2735637d5d0c4bb1ee94789ac6d90c525c227fd5bfd9a056dce768cdc5461eae30c188ef2f4cc788fed8a2c433d86a1ff3d910d59795d886a6b"}, 0xea) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x119042, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x2, 0x4, 0x6, 0x5, 0x8}) (async, rerun: 64) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) (rerun: 64) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9, 0x7fff}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x6, r1, 0x0, r3}) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x301800, 0x0) (async) ioctl$KVM_CAP_VM_TYPES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xeb, 0x0, 0x9}) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, &(0x7f00000003c0)={0x18, r1, 0xffffffff, 0x3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000480)={0x304, r6, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7ff, @mcast1, 0xfffffffb}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xda, @mcast2, 0x2}}}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf28c}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x75a3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @private2, 0x1243}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe8}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbc22}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x14f3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbe6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x54722023}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb89}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffc}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x14}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x20008801}, 0x1) (async) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000840)={0xc, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000880)={0x18, r7}) (async) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000b00)={0x0, &(0x7f00000008c0)=[@in_dx={0x82, 0x20, {0x6916}}, @out_dx={0xaa, 0x28, {0xe219, 0x4, 0x9}}, @wrmsr={0x1e, 0x20, {0x98c, 0x101}}, @wrmsr={0x1e, 0x20, {0xaa5, 0xff}}, @in_dx={0x82, 0x20, {0x1eea, 0x4}}, @set_irq_handler={0xbe, 0x20, {0xee, 0x1}}, @set_irq_handler={0xbe, 0x20, {0x35, 0x2}}, @code={0xa, 0x58, {"430f16f366b8cb008ee0430fe42366baf80cb898a84b8bef66bafc0c66b860be66efc402bd3d03670f785e9a640f0093063af804b9b80b00000f3266430f388225270000000f06"}}, @code={0xa, 0x57, {"66baf80cb820843e8cef66bafc0ced470f3046e30db9800000c00f3235000800000f30440f2287660f7e86c100c0fe66b825010f00d00f303666410fc7b463a2000000650f32"}}, @uexit={0x0, 0x18, 0x1}, @wr_drn={0x6e, 0x20, {0x7, 0x4}}, @wrmsr={0x1e, 0x20, {0x9d3, 0x7ff}}, @set_irq_handler={0xbe, 0x20, {0xe8}}], 0x20f}) ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000b40)={0xc, 0x1, 0xd}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) fsync(r4) (async) r9 = syz_io_uring_setup(0x67d, &(0x7f0000000bc0)={0x0, 0xea77, 0x200, 0x0, 0x27a}, &(0x7f0000000c40), &(0x7f0000000c80)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000cc0)=@IORING_OP_SHUTDOWN={0x22, 0x2a, 0x0, r5, 0x0, 0x0, 0x1, 0x0, 0x1}) r11 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r11, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d00)=""/88, 0x58}, {&(0x7f0000000d80)=""/28, 0x1c}], 0x2, &(0x7f0000000e00)=""/224, 0xe0}, 0x10124) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000f40)) (async, rerun: 32) r12 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) accept$alg(r12, 0x0, 0x0) r13 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000f80)={0x0, 0x9}, &(0x7f0000000fc0)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r13, 0x84, 0x73, &(0x7f0000001000)={r14, 0x8001, 0x10}, &(0x7f0000001040)=0x18) (async) ioctl$TCSETSW2(r9, 0x402c542c, &(0x7f0000001080)={0x8, 0xffff, 0x8000, 0x800, 0x3, "d6f4f52dedb5da400f5a2ba1f095870955e53c", 0x80000001, 0x7}) 1.362383869s ago: executing program 0 (id=1946): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xac[a}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90c\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8&\x1a\xe0\xbbf}\x10D\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001000700080007000000000003"], 0x58) (async, rerun: 32) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r3, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r3, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) (async) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000600)=0x6, 0x8) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000200)={0x3, 0x40, 0x8, 0xff, 0x1, 0xe5, 0x81, 0x1, 0x2, 0x6, 0x1, 0xff, 0x0, 0x3}, 0xe) (async) r6 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r6, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) (rerun: 32) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x19, &(0x7f0000000200)=ANY=[@ANYRESHEX=r4], &(0x7f0000000080)='syzkaller\x00', 0xa, 0xe, &(0x7f0000000300)=""/14, 0x41100, 0x12, '\x00', r7, @fallback=0x24, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x8, 0x200e}, 0x10, r8, r1, 0x1, &(0x7f00000003c0)=[r1, r1], &(0x7f0000000400)=[{0x3, 0x3, 0x4, 0x1}], 0x10, 0x1c4}, 0x94) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x1, 0x40001004, r1, 0x0) (async) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) epoll_create(0x101) (async, rerun: 64) r10 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) sendmmsg$inet6(r10, &(0x7f0000007240), 0x0, 0x1) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x42c2, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000640)={0x48, 0x1, 0x0, 0x0, 0x1, 0x3}) (async) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x1d) r13 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$KVM_HYPERV_EVENTFD(r12, 0x4018aebd, &(0x7f00000000c0)={0x2, r13}) 1.136820843s ago: executing program 0 (id=1947): r0 = socket(0x10, 0x803, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@const={0x4, 0x0, 0x0, 0xa, 0x3}, @union={0x2, 0x1, 0x0, 0x5, 0x1, 0x5, [{0x4, 0x5}]}]}, {0x0, [0x2e, 0x30]}}, &(0x7f00000005c0)=""/132, 0x40, 0x84, 0x0, 0xfffffffe, 0x10000}, 0x28) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$packet(0x11, 0x3, 0x300) socket(0x1e, 0x4, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$pppl2tp(0x18, 0x1, 0x1) socketpair(0x28, 0x800, 0xffff, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r3, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40fe00000e", 0x24) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7a}, @void, @val={0xc, 0x99, {0x63c, 0x24}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x13}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x13}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5334, 0x40}}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000500), 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0) 1.110488501s ago: executing program 4 (id=1948): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) unshare(0x8000000) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00006c7000/0x2000)=nil, 0x2000, 0x3000, 0x7, &(0x7f000022c000/0x3000)=nil) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x5, 0x1}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x4301, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x8}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={r5, @in={{0x2, 0x4e20, @loopback}}, 0x1, 0xaf2, 0x3ff, 0xc, 0x8, 0x1c2, 0x5}, 0x9c) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4048aecb, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000005009803"]) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}}}, 0x0, 0x0, 0x0, 0x0, 0x32, 0x1}, 0x9c) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 978.776863ms ago: executing program 5 (id=1949): r0 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x9}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x9}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 414.588199ms ago: executing program 3 (id=1950): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x5, 0x8}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000400000000000000e4986919", 0x28}], 0x1}, 0x0) 385.696721ms ago: executing program 0 (id=1951): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async) r1 = userfaultfd(0x801) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0xffffffffffffffff, 0x0, 0x101, 0x0, 0xffffffff}, 0x40000000}) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x8000, 0x1, 0xbeb3, 0x7, {{0x41, 0x4, 0x0, 0x2d, 0x104, 0x67, 0x0, 0xfe, 0x4, 0x0, @local, @empty, {[@rr={0x7, 0xb, 0xcd, [@multicast1, @broadcast]}, @timestamp_prespec={0x44, 0x24, 0x76, 0x3, 0x9, [{@empty, 0x9}, {@broadcast, 0x80000001}, {@broadcast, 0x511d}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x4}]}, @timestamp_addr={0x44, 0x3c, 0x40, 0x1, 0xa, [{@private=0xa010102, 0x4}, {@multicast1, 0x1}, {@broadcast, 0x800}, {@broadcast, 0x7f}, {@multicast2, 0x2}, {@private=0xa010102, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @timestamp_prespec={0x44, 0x1c, 0x19, 0x3, 0x8, [{@multicast2, 0x4}, {@broadcast, 0x4}, {@broadcast, 0x7ea}]}, @lsrr={0x83, 0xb, 0x79, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @end, @lsrr={0x83, 0xb, 0xbb, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x24, 0xf7, 0x1, 0x7, [{@multicast1, 0x1}, {@rand_addr=0x64010102, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}, {@remote, 0xaf23}]}, @ssrr={0x89, 0x7, 0xb1, [@rand_addr=0x64010102]}, @lsrr={0x83, 0x27, 0xc5, [@multicast1, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @rand_addr=0x64010101, @empty, @local, @private=0xa010102, @multicast2]}]}}}}}) sendmmsg$inet6(r3, &(0x7f0000002880)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x5, @local, 0x4}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xfc}, {&(0x7f0000000380)="1387fd2a42975d606f08356feb46c4f42177648f94bbdf9771d6519ed498244fdc8d92f1525e724e07ae6db0d7e7a696decad0e4d0816666eda8bd3bf028fba8bf0dd4ea92b894b8cc17032ae9b0cc177dc698ccd8b5f6b3f91005dc", 0x5c}, {&(0x7f0000000580)="82dfb8da418cee62f5562f25539646b6646a4dbe05e60dfa8d9271b48f89916c7b28614c4a30be67c8d7f35db6c87bbed8ad0844856a6e51521e7a1139cb5ae2b2ea8c0352dcc7ec6fb675bd4e4a11e34c6c31d82f5edb8db7d2d2fddc08bd50441c1ddd13d82d37b5f90a5079a74d0b3f44683d076935ac98b61f0e516f53a0ef0eb0ba9dc101b0652f6235ceb3d7b9a1a2264f960f9abdb77973e00707ae410f170ae5b9d6564cde244478c795137d0c864f", 0xb3}, {&(0x7f0000000640)="1c963928391d547b8e02382190295e4bd9366f2d6a0494e4c24883756a4982d8dad4bc5e70585872f3f4f4a4e6f93abeb52943575d816ee8ff6634dc7c8d5234788d8bd82d2b846cd5e6c9cbdf9b600c4275ef4550980294ce117df145413b541e80f6853c1c06b8c361f6fe884eb11c64f1c1b603bf2df18eaf92b47c993c2d42f7192137ec9bcf495f86a8249f59599b927bbc59cebfa5a278e17e1c36d67f425c9d5c17329c2469c98778433221a98183bef24b61d5fa81697e7a0691b11d72cf0d4b26b65418718c26984837d938e611a2dc1bcffe666c8ebb770da023c727022d441da80d97840bb3e53901ce6e413022e1a76f53", 0xf7}], 0x4, &(0x7f00000008c0)=[@hopopts={{0x28, 0x29, 0x36, {0x6c, 0x1, '\x00', [@enc_lim, @pad1, @jumbo={0xc2, 0x4, 0x40}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1ffc000}}, @hoplimit={{0x14, 0x29, 0x34, 0xec}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r4}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x58}}], 0x98}}, {{&(0x7f0000000980)={0xa, 0x4e20, 0xfe4914e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c, &(0x7f0000000f80)=[{&(0x7f00000009c0)="05f589eaacfa3cd02a9e967e51dfbf4852f3cfd49e915ce80248bb17df11e22dbaea4e56b37df97a8c72be3430844833f4c70f80136ed104aff4b67dfe6f1638dc503a94d6bbd011eccb85190709bf341b3902155d0478fc6197c2fabd81312247472db5cd981c0fc72deab25c83a37d5f1e6ca7270f699050461390c25b7a542594042adff37d0e96928f6f9ccc4abf5d76a691e41ee416b6dc1139ab6dbf7b411d9f59c24bda678d94192cf25efd3f064cedf43ed77a0c38dded92fcc42d7d7fe1e38f727400743aa75c2b18bdea946b052bcb916084e48ee2", 0xda}, {&(0x7f0000000ac0)="2f7a4ecc7cb0ddde7583e784929d28421be849ffcf3958a02bbab084993a76a5f840002ccf8140c39048290aa933504646788c6591b7bfe23c536127c4f8f44116c0f7fc1f743a9d816b2b1bd77e04300eb5f142ea922a411ae5f70d6c390ff6a10883daf570ecffe2451b3fded1841f", 0x70}, {&(0x7f0000000b40)="68f83e902e2e04f08a3446e597f3bd56edbd3b6f077c7f487446552a5a687d29253c26b02ddea515c869ac5188c16a1f662addc3089f97c5fe956b4ac0e995ef73ea6d598e6223d2860f76d008ce", 0x4e}, {&(0x7f0000000bc0)="cac61485d6cb969fafcb252a9d92260187977bc3358d66ff41baed0981fdaecef54b7f42a34bd8ef02afbb31e844f97eb59246a717426a60d312ebe7210f479cbcd0579ec043c179e637a0e6df9efd1ac47afc3bc558d7e6aa4da7541677af6c3bbb1c8051e9dcc470c71512487b8ed41e2b2a0f6ec3ae55c691d54e01cab82141b57c8aa9dc2a78c5a08da7235b98b4ec09fd5e2ac63cf8d7fb6769af2f1bb75cda67f8", 0xa4}, {&(0x7f0000000c80)="a81ce63d8efb09a7e0b8e2b499c711a10d9ead09ac5c20fe43f2e3eb8a6bff2e8e20b297c4563b1049bd92da00646481902f5d343b3c9537147492d92e26593188879eddd5d1f45fe776abf032daa346b9b51369bad622713fad7e43145f74109e0b297ed9c703d579a7df2318fdd32c2e61a989a75bbfda6d2e3c6413e0455493e9f41770acff5dcc3a9c738fac349b1f02927216ac3d6a8e83df72392525d8fdf042afb731e06dbd434eb57583d6fa9d8a20e30ea55ae01aba1d3c47162de56b00d6400652557efc5930f9f4fa5d21bab103c3d940c6fa6fb7ae9d9f10", 0xde}, {&(0x7f0000000d80)="b2f2aa93399536be4d0c46dd0e8e6b0c129a10bd2172281564c9e773e1124acf96003d8251f82eebf1b47b93b36bb578e3928b36cffb357661f9a545e2f01c4b41eef44f25e9868ffbb1c527decd27f38615f4ae854e", 0x56}, {&(0x7f0000000e00)="f7305c6c8f80590f348e43f12ed822a69ed3f4131d669ec197947ede54cf545763aad377f5e2258b3a32b0b3248b6a7e3ead72194fff44e4f0c071971ef092b516e79f97464873848c04f12485e41693df6a42b9f50ebe403a7dd8dbcc6688aafea512267232318a4d535bab9bb054fbdc6dd55cf7abe873c04a7e727185378357d48b411a76a969af4a81a0cc5c68b135e072d57c2c2725eee0c10300247347d8739d3fd34d23696c34ac1e3944af02fd56b4e17a43d1689dd9cba38031", 0xbe}, {&(0x7f0000000ec0)="ab0721cf075244b380ef5c1f8cec906005adcbb8f9f41c3e5553fa01646aa60d35cc7c8f2f2540f9a5d4b15ecf54a18b0913089045e3dd173df51ade0ac745773c6e040945ec9314bc17091d022439bb555a22a8875754779d3d730ce535fd0e978e25f2c68284ff268f88853587360cfd71e5190380d394e78ed0b1687d4d69c8197147dd20f77cb517ada767ad248f164b0419d777d1b9c741875c9a58a86d0e909ceb", 0xa4}], 0x8, &(0x7f0000001000)=[@flowinfo={{0x14, 0x29, 0xb, 0xdb9}}, @dstopts_2292={{0x98, 0x29, 0x4, {0x89, 0x10, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @local}, @pad1, @jumbo={0xc2, 0x4, 0x3f0c8875}, @pad1, @enc_lim={0x4, 0x1, 0x6}, @generic={0xd, 0x57, "a6407b3a8aa41649c1b82910161c3d5f8cc061cd5f10ba6720d1dbf34fb6db83e1e988c8c88e74377bdaba78331317550bac103e7541441a2edd1b6d917227c1264a3c3a460acda81cdab124facb5c44a7a979fdbd9b9f"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}], 0xc8}}, {{&(0x7f0000001100)={0xa, 0x4e23, 0xfffff000, @mcast1, 0x3}, 0x1c, &(0x7f00000014c0)=[{&(0x7f0000001140)="8c544bfc6f165886a3d2de89323366ee212e376d6c771e5891f9ef36a1f7d6e979a14af9da6baa150f35f58abdfb9681db52df610164456fc7e40c785641632f1390a7e6983b6435eb2b3a65e5d726a554eb83da847200100000b96f607f41f77c6122ae038a3f2df19deea39c900b40dd6ea8749893b72276a4ba4e0987599c80b00a1c48b17ba8d363323072d9a042fe460818a7e1cd6457e57b2c2591cd690f5903b6c6e7515099153a5926e9775db5cd8e92030c7d9c0a372f7c9addc3a5fc49947385a2ebf45e95c77d3148c2cc15d05c48", 0xd4}, {&(0x7f0000001240)="41bda862f2a6a4ec7ceb3f7d9807d849e8ab1e47a8cdec45960f3d410377c1b34d5db0f120df5ad08458f40c943ad74f95ae524df8bd432bfc8093761b04c15a0b06932efd161ec3c6f3cefaef6661945cade5f4f19b0c9ee41e461dda2800aba3bbe3e6535a129d218aef5a70a7e4425cadbdfeea821e87db6b8294b12c84ce78f1033557680a11e1fbaf0e2b62dcc75e4a9d70c555957c4f8f0a871475850e3e53802573d824c6173d4f53c27818664c0a05756cb787d5c265992252f968a8f75deb11d9981ffe30594a4a21f01fb2862c996dd8c67e", 0xd7}, {&(0x7f0000001340)="9ff5ee335c446f60e7e3760d031c128e3482fcbeec5072a434b54c57f8b00196c99201093db4dd8f71170f685d5f693ce82fca912c17ca9964e9dd2c304902c5acf8a7a91df4874738dfa9762cfc00fe2f0e1cf6c7788ed13e9a7ae8a7e944bcd4cec60c6eeb67ebbaff5e3632846f17af719189953382", 0x77}, {&(0x7f00000013c0)="6b385d29906f10a9ab14602df0a0558e6dee58a73ee64e70bb240929af76a17d9121e114dc4da4e561579fbac90624484e87daf31330b67f03c8840b724ad08d678bcef83210321d7aa38034585739d411bd2b7ff5f0d90461801f9b1e73490be36f6ea5a2691db05527bd882e30167dcbad1ab6e8530d80ba8d5d9d94229751f6b1bec5531bdc24cf94d7cb1283e508cd570776b69d994ef879728a350c4f8a7f061844fa8137a91b90760fc7175e82bfd4b19430b2a1e5dbb285e58741c1a189e908a05daf4401d7ab5f906eb015900f6ffa9a585bc962bf8ffa6e8e9d", 0xde}], 0x4}}, {{&(0x7f0000001500)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400}, 0x1c, &(0x7f0000002800)=[{&(0x7f0000002c00)="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", 0x171}, {&(0x7f0000001640)="4d132c07ade3af215151911ed6f2bb14c29f8e05623b826e3d89f16c2b7055140d4cb559279fc0c89452ce78e59012ee9174885634eee68a4448aff56628c5fae2a904d53722429f20448e250e1f231bb353381621ee2217375b19f9a55d3ee3e40601afdf04fcaab536e409297d37ccb919c8c69af5ecacc9d937", 0x7b}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f00000026c0)="8033d75ed5e5e049203b6dc6b8dc110b521a847ee6716d5dd553b17bfa441843e778b5874212778fb0e752ed4782629af0b6e444bcc7", 0x36}, {&(0x7f0000002700)="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", 0xff}], 0x5}}], 0x4, 0x40880) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000400)='.\x00', 0xa4000271) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000002980)={0x2, 'wlan0\x00', {0x6}, 0xfffd}) (async) close(r5) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x21, 0xae, 0x9, 0x9, @mcast2, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8000, 0x700, 0x5, 0xffffff2d}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x9, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_COMMENT={0x8, 0x1a, '(*.\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xe}]}, 0x54}, 0x1, 0x0, 0x0, 0x40804}, 0x14) r7 = memfd_create(&(0x7f0000000a00)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000000)={0x0, 0xe1d, &(0x7f0000019600)=""/4096}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(0x0, 0x208c, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x20, 0x140c, 0x200, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1000}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x148c7) listen(r5, 0xda90) accept4(r5, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, 0x80000) syz_io_uring_setup(0x37ff, &(0x7f00000002c0)={0x0, 0x918d, 0x40, 0x2, 0x20b}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080)={{0x2b, @multicast2, 0x0, 0x2, 'wlc\x00', 0x6, 0x1, 0x3}, {@empty, 0x2, 0x2, 0x7, 0x0, 0x2}}, 0x44) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, &(0x7f0000000040)) unshare(0x62040200) 224.871771ms ago: executing program 3 (id=1953): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x203b, &(0x7f0000000200)={&(0x7f0000000840)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffeb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004080)="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", 0x200c, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x78, 0x0, 0x7, {0xfffffffffffffffe, 0x1, 0x0, {0x3, 0x69ec2dea, 0x8, 0x201, 0x6dc6, 0x7651, 0xa442, 0x7, 0xe000, 0x601d824b499141fd, 0xcd35, 0xee01, 0xffffffffffffffff, 0x5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) chown(&(0x7f00000021c0)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r5 = openat$cgroup_pressure(r3, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) ppoll(&(0x7f00000001c0)=[{r4}, {r4, 0x10}], 0x2, 0x0, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r8 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x13eb, 0x0, 0x0, 0x14b}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x9, &(0x7f0000000040)=[{&(0x7f0000000280)=""/194, 0xc2}, {0x0}], 0x2}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000f00)={0x84, 0x0, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) write$cgroup_pressure(r5, &(0x7f0000000100)={'some', 0x20, 0x4, 0x20, 0xffffd}, 0x2f) close(r5) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000140)={0x6, 0x80000000, 0xffff, 0x9}, 0x10) 166.127276ms ago: executing program 5 (id=1954): madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3) r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000004000/0x2000)=nil, 0x2000}, 0x6}) mremap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000003000/0x1000)=nil) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x60}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x8, r0, 0x1}) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x3, 0x880) preadv(r1, &(0x7f0000002340)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/60, 0x3c}, {&(0x7f0000001180)=""/203, 0xcb}, {&(0x7f0000001280)=""/191, 0xbf}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x5, 0x5, 0x7fffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000002480)={'ip6gre0\x00', &(0x7f0000002400)={'ip6tnl0\x00', 0x0, 0x2b, 0xa, 0x7, 0x63, 0x26, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x7, 0x80, 0x10, 0x69}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f00000023c0), 0xc, &(0x7f0000002500)={&(0x7f00000024c0)=@ipv6_deladdrlabel={0x1c, 0x49, 0x20, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x1f, 0x0, r4, 0x8001}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000025c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f0000002700)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002600)={0xb8, r6, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x40}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc4e}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xbb3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x1) r7 = syz_open_dev$video(&(0x7f0000002740), 0x6, 0xa03) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000002780)={0x5, 0x14a2, 0x0, 0x6, 0x7, 0x0, [{0x7, 0x0, 0x9, '\x00', 0x600}, {0x524d, 0x2, 0x59, '\x00', 0x1101}, {0x7, 0x0, 0x10001, '\x00', 0x80}, {0xe, 0x94c, 0x4, '\x00', 0xc81}, {0xd, 0x6, 0x2980, '\x00', 0x82}, {0x3, 0x1, 0x6, '\x00', 0x889}, {0x8, 0x0, 0x90f, '\x00', 0x4}]}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002940)={0xaa, 0x402}) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000002980), 0x2) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, r8, 0xd820b000) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00)={0x48200, 0x16, 0x2c}, 0x18) fgetxattr(r9, &(0x7f0000002a40)=@known='com.apple.system.Security\x00', &(0x7f0000002a80)=""/162, 0xa2) r10 = socket$netlink(0x10, 0x3, 0x7) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000002b40)={0x0, 0x1, 0x40, r4, 0xa8b}, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000002bc0)={0x91, 0x0, &(0x7f0000002b80)=[r9, r3, r3, r8, r2, r5, r10]}, 0x7) r11 = syz_open_dev$evdev(&(0x7f0000002c00), 0x6, 0x200) ioctl$EVIOCSFF(r11, 0x40304580, &(0x7f0000002c40)={0x55, 0x2, 0x1, {0x400, 0x1000}, {0x1, 0x800}, @rumble={0x7, 0x800}}) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000002ec0)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002e80)={&(0x7f0000002cc0)={0x184, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}]}, 0x184}, 0x1, 0x0, 0x0, 0x8000}, 0x24048050) fcntl$getownex(r2, 0x10, &(0x7f0000002f00)) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000003000)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x20, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x10) 0s ago: executing program 5 (id=1955): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x1, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf0}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0x80) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "1f0000000800", "f3f6f389d4eccfc2cec6f276afe59f4f", "8f1eef9d", "0707f8d79d065ee9"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040), 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{}, {0x20, 0x0, 0x0, 0x7}, {0x6}]}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x8, 0x800, 0x5, 0x9, 0x200}, 0x14) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xab43, 0x0, 0x0, 0xc, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000f001900", [0xfffffffffffffffd, 0x2000000000002]}}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x1, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf0}}, 0x10}, 0x1c) (async) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) (async) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0x80) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "1f0000000800", "f3f6f389d4eccfc2cec6f276afe59f4f", "8f1eef9d", "0707f8d79d065ee9"}, 0x28) (async) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040), 0x44) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000007240dc2839ad96237fa8b789ee34368af15be662e9d8a70d8cd1f8d8a4fcf0673135994f53cc1554081562ca9665026fa0a533037d9420ea928bf77499b86ccabea87e60c5af714ddd66f7fdea0a2c6cf4922004dc06d221387a7bfd0d9e5d3442ea75fa9c928e949071640f82fa5431a9c61a985592d0339d7f879c55cc6677b1abaefa095d824a419f426e6d9b96813ad26a71867a50b098dbaaac5957274230062cc11fbd0121be9892d811a00e4c6cc2a1ea4cb110922eb6a4b1a9b77e9c38a50819c7ed6947d2cefe60624feeed471c7c173b2b8fee44570348d78cfd74aee09335f684a5fbd01976e7d418824250dc985d7c", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{}, {0x20, 0x0, 0x0, 0x7}, {0x6}]}) (async) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x8, 0x800, 0x5, 0x9, 0x200}, 0x14) (async) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xab43, 0x0, 0x0, 0xc, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000f001900", [0xfffffffffffffffd, 0x2000000000002]}}) (async) kernel console output (not intermixed with test programs): 67394][T11301] ? hash_netnet_create+0x6d5/0x1440 [ 425.967411][T11301] hash_netnet_create+0x741/0x1440 [ 425.967432][T11301] ? __lock_acquire+0xab9/0xd20 [ 425.967449][T11301] ? __pfx_hash_netnet_create+0x10/0x10 [ 425.967465][T11301] ? __nla_parse+0x40/0x60 [ 425.967476][T11301] ? __pfx_hash_netnet_create+0x10/0x10 [ 425.967490][T11301] ip_set_create+0xa97/0x1940 [ 425.967505][T11301] ? ip_set_create+0x4a2/0x1940 [ 425.967523][T11301] ? __pfx_ip_set_create+0x10/0x10 [ 425.967555][T11301] nfnetlink_rcv_msg+0xb4d/0x1130 [ 425.967568][T11301] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 425.967591][T11301] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 425.967603][T11301] ? kasan_save_track+0x4f/0x80 [ 425.967642][T11301] netlink_rcv_skb+0x208/0x470 [ 425.967651][T11301] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.967665][T11301] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 425.967681][T11301] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 425.967702][T11301] ? bpf_lsm_capable+0x9/0x20 [ 425.967714][T11301] ? security_capable+0x7e/0x2e0 [ 425.967730][T11301] nfnetlink_rcv+0x282/0x2590 [ 425.967745][T11301] ? __dev_queue_xmit+0x27b/0x3b50 [ 425.967760][T11301] ? __dev_queue_xmit+0x1d79/0x3b50 [ 425.967778][T11301] ? kasan_save_track+0x3e/0x80 [ 425.967798][T11301] ? __kasan_slab_alloc+0x6c/0x80 [ 425.967830][T11301] ? __dev_queue_xmit+0x27b/0x3b50 [ 425.967861][T11301] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 425.967879][T11301] ? __pfx___dev_queue_xmit+0x10/0x10 [ 425.967904][T11301] ? ref_tracker_free+0x63a/0x7d0 [ 425.967914][T11301] ? __asan_memcpy+0x40/0x70 [ 425.967926][T11301] ? __pfx_ref_tracker_free+0x10/0x10 [ 425.967944][T11301] ? skb_clone+0x246/0x3a0 [ 425.967957][T11301] ? __netlink_deliver_tap+0x807/0x850 [ 425.967966][T11301] ? netlink_deliver_tap+0x2e/0x1b0 [ 425.967979][T11301] ? netlink_deliver_tap+0x2e/0x1b0 [ 425.967992][T11301] netlink_unicast+0x82f/0x9e0 [ 425.968011][T11301] ? __pfx_netlink_unicast+0x10/0x10 [ 425.968025][T11301] ? netlink_sendmsg+0x642/0xb30 [ 425.968033][T11301] ? skb_put+0x11b/0x210 [ 425.968044][T11301] netlink_sendmsg+0x805/0xb30 [ 425.968059][T11301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.968071][T11301] ? aa_sock_msg_perm+0xf1/0x1d0 [ 425.968086][T11301] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 425.968095][T11301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.968105][T11301] __sock_sendmsg+0x21c/0x270 [ 425.968120][T11301] ____sys_sendmsg+0x505/0x830 [ 425.968134][T11301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.968149][T11301] ? import_iovec+0x74/0xa0 [ 425.968163][T11301] ___sys_sendmsg+0x21f/0x2a0 [ 425.968175][T11301] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.968204][T11301] ? __fget_files+0x2a/0x420 [ 425.968213][T11301] ? __fget_files+0x3a0/0x420 [ 425.968228][T11301] __x64_sys_sendmsg+0x19b/0x260 [ 425.968239][T11301] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.968258][T11301] ? do_syscall_64+0xbe/0xfa0 [ 425.968273][T11301] do_syscall_64+0xfa/0xfa0 [ 425.968285][T11301] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.968297][T11301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.968307][T11301] ? clear_bhb_loop+0x60/0xb0 [ 425.968319][T11301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.968329][T11301] RIP: 0033:0x7fd317b8f6c9 [ 425.968339][T11301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.968347][T11301] RSP: 002b:00007fd318a75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.968357][T11301] RAX: ffffffffffffffda RBX: 00007fd317de6180 RCX: 00007fd317b8f6c9 [ 425.968365][T11301] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 425.968371][T11301] RBP: 00007fd317c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 425.968376][T11301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.968382][T11301] R13: 00007fd317de6218 R14: 00007fd317de6180 R15: 00007fd317f0fa28 [ 425.968398][T11301] [ 425.968440][T11301] Mem-Info: [ 426.521479][T11301] active_anon:8778 inactive_anon:0 isolated_anon:0 [ 426.521479][T11301] active_file:17549 inactive_file:40061 isolated_file:0 [ 426.521479][T11301] unevictable:768 dirty:181 writeback:0 [ 426.521479][T11301] slab_reclaimable:8113 slab_unreclaimable:102230 [ 426.521479][T11301] mapped:33875 shmem:3405 pagetables:1480 [ 426.521479][T11301] sec_pagetables:0 bounce:0 [ 426.521479][T11301] kernel_misc_reclaimable:0 [ 426.521479][T11301] free:1259624 free_pcp:28590 free_cma:0 [ 426.576612][T11301] Node 0 active_anon:35112kB inactive_anon:0kB active_file:63028kB inactive_file:160040kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135600kB dirty:724kB writeback:0kB shmem:12084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12908kB pagetables:5672kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 426.609274][T11301] Node 1 active_anon:0kB inactive_anon:0kB active_file:7168kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 426.670368][T11301] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 426.704898][T11301] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 426.745477][T11301] Node 0 DMA32 free:1194548kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35232kB inactive_anon:0kB active_file:63028kB inactive_file:160040kB unevictable:1536kB writepending:724kB zspages:0kB present:3129332kB managed:2565164kB mlocked:0kB bounce:0kB free_pcp:40668kB local_pcp:23692kB free_cma:0kB [ 426.805737][T11301] lowmem_reserve[]: 0 0 0 0 0 [ 426.810620][T11301] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 426.851154][T11301] lowmem_reserve[]: 0 0 0 0 0 [ 426.856665][T11301] Node 1 Normal free:3833772kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:7168kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:68860kB local_pcp:33944kB free_cma:0kB [ 426.930271][ T30] audit: type=1326 audit(1762825000.580:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee38f6c9 code=0x7ffc0000 [ 426.969220][T11301] lowmem_reserve[]: 0 0 0 0 0 [ 426.976287][T11301] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 426.989175][T11301] Node 0 DMA32: 370*4kB (UME) 664*8kB (UME) 382*16kB (UME) 250*32kB (ME) 217*64kB (UME) 112*128kB (UME) 30*256kB (ME) 14*512kB (ME) 6*1024kB (UME) 5*2048kB (UME) 272*4096kB (M) = 1194472kB [ 427.019302][T11301] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 427.032273][T11301] Node 1 Normal: 102*4kB (UME) 47*8kB (UME) 27*16kB (UME) 117*32kB (UME) 50*64kB (UME) 18*128kB (UME) 11*256kB (UME) 4*512kB (UM) 5*1024kB (UME) 4*2048kB (UME) 929*4096kB (M) = 3833824kB [ 427.051233][ T30] audit: type=1326 audit(1762825000.580:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f68ee38f6c9 code=0x7ffc0000 [ 427.079487][ T30] audit: type=1326 audit(1762825000.580:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee38f6c9 code=0x7ffc0000 [ 427.102448][T11301] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 427.113706][T11301] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 427.125058][ T30] audit: type=1326 audit(1762825000.580:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68ee38f6c9 code=0x7ffc0000 [ 427.147994][T11301] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 427.160186][T11301] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 427.171925][ T30] audit: type=1326 audit(1762825000.580:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee38f6c9 code=0x7ffc0000 [ 427.174333][T11301] 61013 total pagecache pages [ 427.194720][ T30] audit: type=1326 audit(1762825000.580:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f68ee38f6c9 code=0x7ffc0000 [ 427.230356][ T30] audit: type=1326 audit(1762825000.580:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee38f6c9 code=0x7ffc0000 [ 427.253350][ T30] audit: type=1326 audit(1762825000.580:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f68ee38f6c9 code=0x7ffc0000 [ 427.288214][ T30] audit: type=1326 audit(1762825000.590:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee38f6c9 code=0x7ffc0000 [ 427.314718][ T30] audit: type=1326 audit(1762825000.590:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.1.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68ee38f6c9 code=0x7ffc0000 [ 427.364251][T11301] 0 pages in swap cache [ 427.414881][T11301] Free swap = 124996kB [ 427.430819][T11332] loop2: detected capacity change from 0 to 7 [ 427.438165][T11332] loop2: [POWERTEC] p1 p2 p3 p4 [ 427.444920][T11332] loop2: p2 start 4294967287 is beyond EOD, truncated [ 427.451703][T11332] loop2: p3 start 1932423285 is beyond EOD, truncated [ 427.461401][T11301] Total swap = 124996kB [ 427.466471][T11332] loop2: p4 size 1986356271 extends beyond EOD, truncated [ 427.474036][T11301] 2097051 pages RAM [ 427.513608][T11301] 0 pages HighMem/MovableOnly [ 427.529747][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 427.543241][T11301] 424118 pages reserved [ 427.559882][T11301] 0 pages cma reserved [ 427.573748][ T6435] udevd[6435]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 428.011812][T11343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.402036][T11343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.408329][T11342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.461303][T11342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.645849][ T5828] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 428.838952][ T5828] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 428.871658][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.905316][ T5828] usb 2-1: Product: syz [ 428.921709][ T5828] usb 2-1: Manufacturer: syz [ 428.947802][ T5828] usb 2-1: SerialNumber: syz [ 428.995050][ T5828] usb 2-1: config 0 descriptor?? [ 429.650175][T11361] xt_hashlimit: size too large, truncated to 1048576 [ 429.959226][ T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 430.095508][ T5828] usb 2-1: Firmware version (0.0) predates our first public release. [ 430.119499][ T5828] usb 2-1: Please update to version 0.2 or newer [ 430.192752][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 430.272910][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 430.309334][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.348916][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 430.369954][ T24] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 430.379972][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.396233][ T24] usb 4-1: config 0 descriptor?? [ 430.825775][T11378] loop2: detected capacity change from 0 to 7 [ 430.876017][ T5828] usb 2-1: USB disconnect, device number 97 [ 430.900695][T11378] loop2: [POWERTEC] p1 p2 p3 p4 [ 430.929528][T11378] loop2: p2 start 4294967287 is beyond EOD, truncated [ 430.938317][T11378] loop2: p3 start 1932423285 is beyond EOD, truncated [ 430.946471][T11378] loop2: p4 size 1986356271 extends beyond EOD, truncated [ 430.966727][T11379] netlink: 'syz.3.1446': attribute type 4 has an invalid length. [ 431.062202][T11382] netlink: 'syz.3.1446': attribute type 4 has an invalid length. [ 431.156304][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 431.182226][ T6435] udevd[6435]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 431.343608][T11362] loop7: detected capacity change from 16383 to 0 [ 431.366497][ C1] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 2 [ 431.672365][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 431.802946][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 431.827470][ T24] usb 4-1: USB disconnect, device number 65 [ 432.653893][T11423] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 432.853287][ T10] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 432.982852][ T10] usb 4-1: device descriptor read/64, error -71 [ 433.254413][ T10] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 433.403025][ T10] usb 4-1: device descriptor read/64, error -71 [ 433.513138][ T10] usb usb4-port1: attempt power cycle [ 433.852774][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 433.883744][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 433.883760][ T30] audit: type=1400 audit(1762825007.530:590): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=11437 comm="syz.5.1469" [ 433.944035][ T10] usb 4-1: device descriptor read/8, error -71 [ 434.213123][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 434.243473][ T10] usb 4-1: device descriptor read/8, error -71 [ 434.384203][ T10] usb usb4-port1: unable to enumerate USB device [ 435.296882][T11452] input: syz1 as /devices/virtual/input/input53 [ 435.446994][T11454] ======================================================= [ 435.446994][T11454] WARNING: The mand mount option has been deprecated and [ 435.446994][T11454] and is ignored by this kernel. Remove the mand [ 435.446994][T11454] option from the mount to silence this warning. [ 435.446994][T11454] ======================================================= [ 435.812736][ T24] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 435.943394][ T30] audit: type=1400 audit(1762825009.580:591): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=11466 comm="syz.5.1478" [ 436.041573][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.112698][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.402236][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 436.444289][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 436.507920][ T24] usb 2-1: Manufacturer: syz [ 436.535204][ T24] usb 2-1: config 0 descriptor?? [ 437.168368][ T24] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 437.182561][ T24] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 437.195814][ T24] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 437.211636][ T24] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 437.229185][ T24] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 437.236390][ T24] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 437.246935][ T24] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 437.277189][ T24] pyra 0003:1E7D:2CF6.0013: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 437.400785][T11488] trusted_key: encrypted_key: master key parameter is missing [ 437.622948][T11495] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.644634][T11494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.660407][T11494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.775301][T11498] syzkaller0: entered promiscuous mode [ 437.798377][ T30] audit: type=1326 audit(1762825011.450:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz.4.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa233f8f6c9 code=0x7ffc0000 [ 437.806009][T11500] create_pit_timer: 1 callbacks suppressed [ 437.806024][T11500] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 437.845811][T11500] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 437.863037][ T30] audit: type=1326 audit(1762825011.450:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz.4.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa233f8f6c9 code=0x7ffc0000 [ 437.885389][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.892339][ T30] audit: type=1326 audit(1762825011.450:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz.4.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa233f8f6c9 code=0x7ffc0000 [ 437.915383][ T30] audit: type=1326 audit(1762825011.450:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz.4.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa233f8f6c9 code=0x7ffc0000 [ 437.915787][T11500] kvm: requested 89676 ns i8254 timer period limited to 200000 ns [ 437.937713][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.940201][ T30] audit: type=1326 audit(1762825011.450:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz.4.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa233f8f6c9 code=0x7ffc0000 [ 438.033364][T11500] kvm: requested 62857 ns i8254 timer period limited to 200000 ns [ 438.060576][ T30] audit: type=1326 audit(1762825011.450:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz.4.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa233f8f6c9 code=0x7ffc0000 [ 438.086730][ C1] vkms_vblank_simulate: vblank timer overrun [ 438.112773][ T10] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 438.175724][ T30] audit: type=1326 audit(1762825011.450:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz.4.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa233f8f6c9 code=0x7ffc0000 [ 438.274080][T11510] netlink: 'syz.0.1487': attribute type 30 has an invalid length. [ 438.332814][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 438.347509][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.371195][ T30] audit: type=1326 audit(1762825011.450:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11492 comm="syz.4.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa233f8f6c9 code=0x7ffc0000 [ 438.404688][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 438.414841][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.431604][T11457] xt_connbytes: Forcing CT accounting to be enabled [ 438.438261][ T10] usb 4-1: Product: syz [ 438.449974][ T10] usb 4-1: Manufacturer: syz [ 438.455442][ T10] usb 4-1: SerialNumber: syz [ 438.462155][ T10] usb 4-1: config 0 descriptor?? [ 438.482517][ T10] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22 [ 439.189030][ T10] usb 4-1: USB disconnect, device number 70 [ 439.816009][T11526] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.931007][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.937451][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.536503][ T10] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 440.708451][ T10] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 440.716804][ T10] usb 4-1: config 0 has no interface number 0 [ 440.724614][ T10] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 440.771888][ T10] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 440.909770][ T10] usb 4-1: config 0 interface 113 has no altsetting 0 [ 440.960776][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 440.970385][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.990337][ T10] usb 4-1: Product: syz [ 441.010577][ T10] usb 4-1: Manufacturer: syz [ 441.063698][ T10] usb 4-1: SerialNumber: syz [ 441.090033][ T10] usb 4-1: config 0 descriptor?? [ 441.107881][ C0] usb 4-1: NFC: Urb failure (status -71) [ 441.114140][ T10] usb 4-1: NFC: Unable to get FW version [ 441.120221][ T10] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 441.172839][ T24] pyra 0003:1E7D:2CF6.0013: couldn't init struct pyra_device [ 441.180351][ T24] pyra 0003:1E7D:2CF6.0013: couldn't install mouse [ 441.201977][ T24] pyra 0003:1E7D:2CF6.0013: probe with driver pyra failed with error -71 [ 441.281999][ T24] usb 2-1: USB disconnect, device number 98 [ 441.413457][T11534] fido_id[11534]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 441.436212][ T10] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 441.634790][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 441.643636][ T10] usb 6-1: config 129 has an invalid interface number: 135 but max is 0 [ 441.713889][ T10] usb 6-1: config 129 has an invalid interface number: 5 but max is 0 [ 441.758309][ T10] usb 6-1: config 129 descriptor has 1 excess byte, ignoring [ 441.785968][ T10] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 441.814713][ T10] usb 6-1: config 129 has no interface number 0 [ 441.849642][ T10] usb 6-1: config 129 has no interface number 1 [ 441.866950][ T10] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 441.914419][ T10] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 441.935657][ T10] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 441.990589][ T10] usb 6-1: config 129 interface 135 has no altsetting 0 [ 442.018612][ T10] usb 6-1: config 129 interface 5 has no altsetting 0 [ 442.054646][ T10] usb 6-1: string descriptor 0 read error: -22 [ 442.061013][ T10] usb 6-1: New USB device found, idVendor=0040, idProduct=7200, bcdDevice=f2.62 [ 442.173051][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.315334][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 442.352782][ T10] usb 6-1: MIDIStreaming interface descriptor not found [ 442.631584][ T116] usb 4-1: USB disconnect, device number 71 [ 442.712953][ T10] usb 6-1: USB disconnect, device number 44 [ 443.133994][T11563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.150670][T11557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1498'. [ 443.160785][T11563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.179928][T11557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1498'. [ 443.322794][ T116] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 443.475072][ T116] usb 6-1: config 0 has an invalid interface number: 129 but max is 0 [ 443.484151][ T116] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.495112][ T116] usb 6-1: config 0 has no interface number 0 [ 443.501480][ T116] usb 6-1: config 0 interface 129 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 443.518735][ T116] usb 6-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=80.8e [ 443.537955][ T116] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.546577][ T116] usb 6-1: Product: syz [ 443.550813][ T116] usb 6-1: Manufacturer: syz [ 443.555876][ T116] usb 6-1: SerialNumber: syz [ 443.581193][ T116] r8152-cfgselector 6-1: Unknown version 0x0000 [ 443.588303][ T116] r8152-cfgselector 6-1: config 0 descriptor?? [ 443.761888][T11565] input: syz0 as /devices/virtual/input/input54 [ 443.808084][ T116] r8152 6-1:0.129: Expected endpoints are not found [ 443.827183][ T116] r8152-cfgselector 6-1: USB disconnect, device number 45 [ 445.419055][T11579] vivid-007: disconnect [ 445.645886][T11557] dummy0: entered promiscuous mode [ 445.651758][T11557] dummy0: left promiscuous mode [ 445.879421][T11589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.889866][T11589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.078632][T11577] vivid-007: reconnect [ 446.083339][ T10] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 446.270523][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 446.278771][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 446.350490][ T10] usb 2-1: config 2 has an invalid interface number: 212 but max is 1 [ 446.358881][ T10] usb 2-1: config 2 has an invalid interface number: 226 but max is 1 [ 446.367376][ T10] usb 2-1: config 2 has no interface number 0 [ 446.373750][ T10] usb 2-1: config 2 has no interface number 1 [ 446.381357][ T10] usb 2-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 446.399767][ T10] usb 2-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 446.411367][ T10] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 446.422837][ T10] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 446.514696][ T10] usb 2-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 446.594798][ T10] usb 2-1: config 2 interface 212 has no altsetting 0 [ 446.644868][ T10] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 446.657881][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.738417][ T10] usb 2-1: Product: syz [ 446.748556][ T10] usb 2-1: Manufacturer: syz [ 446.753263][ T10] usb 2-1: SerialNumber: syz [ 446.871863][T11602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.924669][T11602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.067296][T11584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.081365][T11584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.167884][T11608] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1507'. [ 447.614356][ T116] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 447.772745][ T116] usb 4-1: Using ep0 maxpacket: 32 [ 447.787133][ T116] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 447.797292][ T116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.816081][ T116] usb 4-1: config 0 descriptor?? [ 447.831543][ T116] as10x_usb: device has been detected [ 447.838907][ T116] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 447.862061][ T116] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 447.942074][ T116] as10x_usb: error during firmware upload part1 [ 447.956904][ T116] Registered device nBox DVB-T Dongle [ 447.976846][ T10] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.226/input/input55 [ 448.044825][ T10] usb 2-1: USB disconnect, device number 99 [ 448.044882][ C1] xpad 2-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19 [ 448.078827][ T24] usb 4-1: USB disconnect, device number 72 [ 448.147085][ T24] Unregistered device nBox DVB-T Dongle [ 448.152053][ T24] as10x_usb: device has been disconnected [ 448.480015][T11633] loop2: detected capacity change from 0 to 7 [ 448.492067][T11633] loop2: [POWERTEC] p1 p2 p3 p4 [ 448.504109][T11633] loop2: p2 start 4294967287 is beyond EOD, truncated [ 448.511614][T11633] loop2: p3 start 1932423285 is beyond EOD, truncated [ 448.519185][T11633] loop2: p4 size 1986356271 extends beyond EOD, truncated [ 448.556389][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 448.570604][ T6435] udevd[6435]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 450.192779][ T116] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 450.442778][ T116] usb 6-1: Using ep0 maxpacket: 8 [ 450.451915][ T116] usb 6-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 450.461259][ T116] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.497450][ T116] usb 6-1: Product: syz [ 450.508498][ T116] usb 6-1: Manufacturer: syz [ 450.523840][ T116] usb 6-1: SerialNumber: syz [ 450.569871][ T116] usb 6-1: config 0 descriptor?? [ 450.637763][ T116] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 451.009005][T11674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.019870][T11674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.180051][ T116] gspca_vc032x: reg_w err -71 [ 451.191261][ T116] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 451.226723][ T116] usb 6-1: USB disconnect, device number 46 [ 451.961670][T11682] fuse: Unknown parameter '1844674407370955161500000000000000000000000' [ 452.532788][ T9] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 452.550662][T11690] vlan2: entered promiscuous mode [ 452.556138][T11690] bridge0: entered promiscuous mode [ 452.583474][ T5828] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 452.694476][ T9] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 452.703844][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.715894][ T9] usb 6-1: config 0 descriptor?? [ 452.733970][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 452.735710][T11694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.753259][ T5828] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.753277][T11694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.765974][ T5828] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 452.780562][ T24] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 452.788486][ T5828] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 452.804892][ T5828] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 452.814432][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.822442][ T5828] usb 2-1: Product: syz [ 452.826703][ T5828] usb 2-1: Manufacturer: syz [ 452.831300][ T5828] usb 2-1: SerialNumber: syz [ 452.922741][ T24] usb 4-1: device descriptor read/64, error -71 [ 453.133589][ T9] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 453.157112][ T9] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 453.164001][ T9] [drm] Initialized udl on minor 2 [ 453.173979][ T24] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 453.312810][ T24] usb 4-1: device descriptor read/64, error -71 [ 453.423291][ T24] usb usb4-port1: attempt power cycle [ 453.762925][ T24] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 453.793430][ T24] usb 4-1: device descriptor read/8, error -71 [ 454.042728][ T24] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 454.073645][ T24] usb 4-1: device descriptor read/8, error -71 [ 454.192990][ T24] usb usb4-port1: unable to enumerate USB device [ 454.403911][T11703] fuse: Unknown parameter 'userid' [ 454.933893][ T5828] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 454.956575][ T5828] cdc_ncm 2-1:1.0: bind() failure [ 454.962243][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 454.981467][ T5828] usb 2-1: USB disconnect, device number 100 [ 455.000613][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 455.021701][ T5912] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 455.042136][ T9] usb 6-1: USB disconnect, device number 47 [ 455.059078][ T5912] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 455.423608][T11715] netlink: 'syz.1.1541': attribute type 20 has an invalid length. [ 455.532769][ T9] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 455.694787][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 455.704203][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 455.732777][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 455.851028][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 455.882047][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.909469][ T9] usb 6-1: Product: syz [ 456.057179][ T9] usb 6-1: Manufacturer: syz [ 456.067605][ T9] usb 6-1: SerialNumber: syz [ 456.104410][ T9] usb 6-1: config 0 descriptor?? [ 456.135994][ T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 456.183529][ T9] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 456.764148][ T9] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 456.773271][ T9] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 457.182689][ T9] em28xx 6-1:0.0: AC97 command still being executed: not handled properly! [ 457.201546][ T9] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 457.224314][ T9] em28xx 6-1:0.0: No AC97 audio processor [ 457.401887][ T24] usb 6-1: USB disconnect, device number 48 [ 457.409376][ T24] em28xx 6-1:0.0: Disconnecting em28xx [ 457.442159][ T24] em28xx 6-1:0.0: Freeing device [ 457.443931][T11747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.487109][T11750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1552'. [ 457.487534][T11747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.654261][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'. [ 457.666037][T11753] netlink: set zone limit has 8 unknown bytes [ 457.912772][ T24] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 458.040511][T11758] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1556'. [ 458.051098][T11758] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1556'. [ 458.064963][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.076653][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.086974][ T24] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 458.096386][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.107253][ T24] usb 2-1: config 0 descriptor?? [ 458.525266][T11753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.546791][T11753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.652745][ T116] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 458.759427][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 458.770407][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 458.780571][ T24] usb 2-1: USB disconnect, device number 101 [ 458.804453][ T116] usb 4-1: Using ep0 maxpacket: 8 [ 458.810989][ T116] usb 4-1: config 162 has an invalid interface number: 166 but max is 0 [ 458.819658][ T116] usb 4-1: config 162 has no interface number 0 [ 458.833272][ T116] usb 4-1: config 162 interface 166 has no altsetting 0 [ 458.845223][ T116] usb 4-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea [ 458.855300][ T116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.871191][ T116] usb 4-1: Product: syz [ 458.875513][ T116] usb 4-1: Manufacturer: syz [ 458.880117][ T116] usb 4-1: SerialNumber: syz [ 458.918835][T11770] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.981968][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 458.981983][ T30] audit: type=1326 audit(1762825032.630:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11771 comm="syz.5.1562" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd317b8f6c9 code=0x0 [ 459.022502][ T30] audit: type=1326 audit(1762825032.670:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.4.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa233f8f6c9 code=0x7ffc0000 [ 459.050606][ T30] audit: type=1326 audit(1762825032.670:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.4.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa233f8f6c9 code=0x7ffc0000 [ 459.076315][ T30] audit: type=1326 audit(1762825032.670:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.4.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa233f8df10 code=0x7ffc0000 [ 459.103793][ T30] audit: type=1326 audit(1762825032.670:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.4.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa233f8f6c9 code=0x7ffc0000 [ 459.139865][T11764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.148942][ T30] audit: type=1326 audit(1762825032.670:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.4.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa233f8f6c9 code=0x7ffc0000 [ 459.178370][ T30] audit: type=1326 audit(1762825032.670:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.4.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa233f8f6c9 code=0x7ffc0000 [ 459.178399][T11764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.203501][ T30] audit: type=1326 audit(1762825032.700:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.4.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa233f915e7 code=0x7ffc0000 [ 459.208456][ C1] vkms_vblank_simulate: vblank timer overrun [ 459.251087][ T30] audit: type=1326 audit(1762825032.700:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.4.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa233f9155c code=0x7ffc0000 [ 459.274720][ T30] audit: type=1326 audit(1762825032.700:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.4.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa233f91494 code=0x7ffc0000 [ 459.425705][ T116] appledisplay 4-1:162.166: Error while getting initial brightness: -71 [ 459.445329][ T116] appledisplay 4-1:162.166: probe with driver appledisplay failed with error -71 [ 459.464469][ T116] usb 4-1: USB disconnect, device number 77 [ 459.563010][T11790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.576645][T11790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.667942][ T116] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 460.812781][ T116] usb 2-1: device descriptor read/64, error -71 [ 460.934728][ T9] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 461.072774][ T116] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 461.152198][ T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 461.175607][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.185130][ T9] usb 4-1: Product: syz [ 461.189348][ T9] usb 4-1: Manufacturer: syz [ 461.194099][ T9] usb 4-1: SerialNumber: syz [ 461.201659][ T9] usb 4-1: config 0 descriptor?? [ 461.243085][ T116] usb 2-1: device descriptor read/64, error -71 [ 461.360012][ T116] usb usb2-port1: attempt power cycle [ 461.724675][ T116] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 461.764168][ T116] usb 2-1: device descriptor read/8, error -71 [ 462.130824][T11812] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.142923][ T116] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 462.210096][ T116] usb 2-1: device descriptor read/8, error -71 [ 462.325049][ T9] usb 4-1: Firmware version (0.0) predates our first public release. [ 462.334538][ T9] usb 4-1: Please update to version 0.2 or newer [ 462.343006][ T116] usb usb2-port1: unable to enumerate USB device [ 462.652702][ T10] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 462.805115][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.815344][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 462.825538][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 462.834885][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 462.842983][ T10] usb 6-1: SerialNumber: syz [ 463.568855][ T116] usb 4-1: USB disconnect, device number 78 [ 463.713582][T11837] usb usb8: usbfs: process 11837 (syz.4.1577) did not claim interface 6 before use [ 463.833743][ T24] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 463.992908][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 464.004032][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 464.028959][ T24] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 96 [ 464.046912][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 464.063663][ T24] usb 2-1: language id specifier not provided by device, defaulting to English [ 464.079981][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 464.098777][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.110477][ T24] usb 2-1: Product: syz [ 464.116779][ T24] usb 2-1: Manufacturer: å¾—ã‡©ážˆè¬†â¿¢ï‘ [ 464.129474][ T24] usb 2-1: SerialNumber: syz [ 464.145835][T11828] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 464.172840][ T116] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 464.332735][ T116] usb 4-1: Using ep0 maxpacket: 16 [ 464.340044][ T116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.352568][ T116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.364661][ T116] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 464.387313][ T116] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 464.405566][T11828] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 464.439609][ T116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.473762][ T116] usb 4-1: config 0 descriptor?? [ 464.864591][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 464.864618][ T30] audit: type=1804 audit(1762825038.520:649): pid=11844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1580" name="/newroot/306/file1" dev="fuse" ino=1 res=1 errno=0 [ 464.917928][ T116] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 464.939227][ T116] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 464.958939][ T116] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 464.977225][ T116] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 464.999831][ T116] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 465.026343][ T116] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 465.035046][T11847] loop6: detected capacity change from 0 to 2640 [ 465.127793][ T5836] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.131978][ T116] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 465.148807][ T5836] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.168638][ T116] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 465.177464][ T5836] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.190998][ T116] microsoft 0003:045E:07DA.0014: item fetching failed at offset 32/34 [ 465.201906][ T5836] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.218837][ T116] microsoft 0003:045E:07DA.0014: parse failed [ 465.227970][ T5836] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.246672][ T116] microsoft 0003:045E:07DA.0014: probe with driver microsoft failed with error -22 [ 465.288599][ T5836] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.311411][ T5836] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.329342][ T5836] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.363150][ T5836] ldm_validate_partition_table(): Disk read failed. [ 465.399832][ T5836] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.450263][ T5836] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.459493][ T5836] Dev loop6: unable to read RDB block 0 [ 465.463827][ T10] usb 6-1: 0:2 : does not exist [ 465.484629][T11852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.524019][ T5836] loop6: unable to read partition table [ 465.555997][T11847] ldm_validate_partition_table(): Disk read failed. [ 465.563980][T11852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.582101][T11847] Dev loop6: unable to read RDB block 0 [ 465.590670][T11847] loop6: unable to read partition table [ 465.597254][T11847] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 465.647815][ T10] usb 6-1: USB disconnect, device number 49 [ 465.666664][ T5898] usb 4-1: USB disconnect, device number 79 [ 465.681665][T11859] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1583'. [ 465.828535][ T6435] udevd[6435]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.026154][T11866] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1584'. [ 466.434522][T11873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1586'. [ 466.607971][ T24] usb 2-1: USB disconnect, device number 106 [ 467.292769][ T116] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 467.322733][ T24] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 467.446755][ T30] audit: type=1804 audit(1762825041.100:650): pid=11888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1591" name="/newroot/314/file1" dev="fuse" ino=1 res=1 errno=0 [ 467.462834][ T24] usb 2-1: device descriptor read/64, error -71 [ 467.484572][ T116] usb 6-1: config 0 has no interfaces? [ 467.492138][ T116] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 467.534666][T11889] usb usb8: usbfs: process 11889 (syz.4.1590) did not claim interface 6 before use [ 467.568467][ T116] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.586735][ T116] usb 6-1: Product: syz [ 467.601602][ T116] usb 6-1: Manufacturer: syz [ 467.621871][ T116] usb 6-1: SerialNumber: syz [ 467.635601][ T116] usb 6-1: config 0 descriptor?? [ 467.723052][ T24] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 467.803907][T11893] netlink: 'syz.3.1592': attribute type 30 has an invalid length. [ 467.965438][ T24] usb 2-1: device descriptor read/64, error -71 [ 468.061323][T11880] team_slave_0: entered promiscuous mode [ 468.067177][T11880] team_slave_1: entered promiscuous mode [ 468.072870][T11880] bond_slave_0: entered promiscuous mode [ 468.078639][T11880] bond_slave_1: entered promiscuous mode [ 468.084298][T11880] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 468.092437][ T24] usb usb2-port1: attempt power cycle [ 468.121248][T11880] vlan2: entered promiscuous mode [ 468.126608][T11880] team0: entered promiscuous mode [ 468.260430][T11880] bond0: entered promiscuous mode [ 468.361681][ T10] usb 6-1: USB disconnect, device number 50 [ 468.552728][ T24] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 468.573149][ T24] usb 2-1: device descriptor read/8, error -71 [ 468.781939][T11897] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1593'. [ 468.802420][T11897] unsupported nlmsg_type 40 [ 468.833982][ T24] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 468.875923][ T24] usb 2-1: device descriptor read/8, error -71 [ 468.966066][T11903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.976256][T11903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.985063][ T24] usb usb2-port1: unable to enumerate USB device [ 469.038166][T11903] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1596'. [ 469.701226][T11912] tipc: Enabling of bearer rejected, failed to enable media [ 469.863710][T11915] TCP: TCP_TX_DELAY enabled [ 470.241072][T11923] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1603'. [ 470.612702][ T24] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 471.276949][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1601'. [ 471.364047][T11927] loop3: detected capacity change from 0 to 7 [ 471.373842][T11927] Dev loop3: unable to read RDB block 7 [ 471.379405][T11927] loop3: unable to read partition table [ 471.385754][T11923] ALSA: mixer_oss: invalid OSS volume 'u' [ 471.408322][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 471.425375][T11927] loop3: partition table beyond EOD, truncated [ 471.466792][T11927] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 471.550179][T11936] loop2: detected capacity change from 0 to 7 [ 471.557921][ T6435] loop2: [POWERTEC] p1 p2 p3 p4 [ 471.564907][ T6435] loop2: p2 start 4294967287 is beyond EOD, truncated [ 471.572396][ T6435] loop2: p3 start 1932423285 is beyond EOD, truncated [ 471.595567][ T6435] loop2: p4 size 1986356271 extends beyond EOD, truncated [ 471.596312][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.619390][T11936] loop2: [POWERTEC] p1 p2 p3 p4 [ 471.632323][T11936] loop2: p2 start 4294967287 is beyond EOD, truncated [ 471.644588][T11940] openvswitch: netlink: Missing key (keys=40, expected=80) [ 471.656757][T11936] loop2: p3 start 1932423285 is beyond EOD, truncated [ 471.674635][T11936] loop2: p4 size 1986356271 extends beyond EOD, truncated [ 471.746869][ T24] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 471.761637][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 471.777714][ T24] usb 2-1: config 1 has no interface number 1 [ 471.790363][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 471.797875][ T6435] udevd[6435]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 471.815525][T11941] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 471.824648][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.846818][ T24] usb 2-1: Product: syz [ 471.917573][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 471.940603][ T6435] udevd[6435]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 472.071744][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1608'. [ 472.152801][ T24] usb 2-1: Manufacturer: syz [ 472.163600][ T24] usb 2-1: SerialNumber: syz [ 473.181678][T11959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1612'. [ 473.199663][T11959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1612'. [ 473.935548][ T24] usb 2-1: USB disconnect, device number 111 [ 474.146389][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1615'. [ 474.391898][T11986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1617'. [ 474.500560][T11989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1617'. [ 474.822790][ T24] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 474.974306][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.988492][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 475.037592][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 475.064166][ T24] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 475.115864][ T24] usb 2-1: config 1 interface 1 has no altsetting 0 [ 475.135918][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 475.145614][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.179048][ T24] usb 2-1: Product: syz [ 475.191051][ T24] usb 2-1: Manufacturer: syz [ 475.237081][ T24] usb 2-1: SerialNumber: syz [ 475.508213][ T24] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 475.522759][ T24] usb 2-1: MIDIStreaming interface descriptor not found [ 475.637720][ T24] usb 2-1: USB disconnect, device number 112 [ 475.663263][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1622'. [ 475.694220][T12003] netlink: 'syz.4.1622': attribute type 13 has an invalid length. [ 475.742272][ T7011] udevd[7011]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.827713][T12003] vxlan0: entered promiscuous mode [ 475.931376][ T7194] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.942773][ T7194] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.206157][ T7194] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.227064][ T7194] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.634109][T12015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.703462][T12015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.722511][T12017] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1624'. [ 476.748982][T12017] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1624'. [ 476.799249][T12017] bridge0: entered promiscuous mode [ 477.090089][ T30] audit: type=1400 audit(1762825050.740:651): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=12020 comm="syz.0.1628" [ 477.124752][T12019] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1627'. [ 477.489216][T12031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.508052][T12031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.922758][ T10] usb 4-1: new low-speed USB device number 80 using dummy_hcd [ 478.157327][ T10] usb 4-1: device descriptor read/64, error -71 [ 478.432762][ T10] usb 4-1: new low-speed USB device number 81 using dummy_hcd [ 478.614329][T12046] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[12046] [ 478.702358][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1631'. [ 478.711512][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1631'. [ 478.852719][ T10] usb 4-1: device descriptor read/64, error -71 [ 478.973421][ T10] usb usb4-port1: attempt power cycle [ 479.360820][ T10] usb 4-1: new low-speed USB device number 82 using dummy_hcd [ 479.459821][ T10] usb 4-1: device descriptor read/8, error -71 [ 479.740947][ T10] usb 4-1: new low-speed USB device number 83 using dummy_hcd [ 479.799292][ T10] usb 4-1: device descriptor read/8, error -71 [ 479.882738][ T24] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 479.913140][ T10] usb usb4-port1: unable to enumerate USB device [ 480.062727][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 480.072304][ T24] usb 6-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice=e0.4e [ 480.082410][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.091181][ T24] usb 6-1: Product: syz [ 480.101924][ T24] usb 6-1: Manufacturer: syz [ 480.107299][ T24] usb 6-1: SerialNumber: syz [ 480.118960][ T24] usb 6-1: config 0 descriptor?? [ 480.135658][T12058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1638'. [ 480.137051][ T24] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628e [ 480.151909][T12058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1638'. [ 480.336310][ T24] gspca_sn9c20x: Write register 1000 failed -71 [ 480.349544][ T24] gspca_sn9c20x: Device initialization failed [ 480.356864][ T24] gspca_sn9c20x 6-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 480.373641][ T24] usb 6-1: USB disconnect, device number 51 [ 480.990056][ T7196] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.093244][ T24] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 481.138140][ T7196] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.260530][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 481.268962][ T24] usb 4-1: can't read configurations, error -61 [ 481.503469][ T7196] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.532782][ T24] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 481.615656][ T7196] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.796679][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 481.890702][ T7196] bridge_slave_1: left allmulticast mode [ 481.905750][ T7196] bridge_slave_1: left promiscuous mode [ 481.921179][ T7196] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.958115][ T24] usb 4-1: can't read configurations, error -61 [ 482.000955][ T7196] bridge_slave_0: left allmulticast mode [ 482.020598][ T7196] bridge_slave_0: left promiscuous mode [ 482.022750][ T24] usb usb4-port1: attempt power cycle [ 482.034511][T12076] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1643'. [ 482.062291][ T7196] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.357165][T12089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1645'. [ 482.685798][ T24] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 482.718044][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 482.727159][ T24] usb 4-1: can't read configurations, error -61 [ 482.882816][ T24] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 482.906730][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 482.914499][ T24] usb 4-1: can't read configurations, error -61 [ 482.921618][ T24] usb usb4-port1: unable to enumerate USB device [ 483.303669][T12108] usb usb8: usbfs: process 12108 (syz.5.1648) did not claim interface 6 before use [ 483.537936][T12116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1649'. [ 483.547139][T12116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1649'. [ 483.711813][T12119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.765925][T12119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.991397][ T7196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.024512][ T7196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.054597][ T7196] bond0 (unregistering): Released all slaves [ 484.661057][T12116] bridge0: entered promiscuous mode [ 484.689123][T12116] ip6gretap0: entered promiscuous mode [ 484.718263][T12116] debugfs: 'hsr1' already exists in 'hsr' [ 484.738369][T12116] Cannot create hsr debugfs directory [ 484.769694][ T7196] tipc: Left network mode [ 485.006870][T12134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.450317][T12146] input: syz0 as /devices/virtual/input/input56 [ 486.051954][ T7196] hsr_slave_0: left promiscuous mode [ 486.095748][ T7196] hsr_slave_1: left promiscuous mode [ 486.101902][ T7196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.131835][ T7196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.313685][ T7196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.327866][T12162] netlink: 'syz.4.1659': attribute type 20 has an invalid length. [ 486.344122][ T7196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.598791][ T7196] veth1_macvtap: left promiscuous mode [ 486.634164][ T7196] veth0_macvtap: left promiscuous mode [ 486.650069][ T7196] veth1_vlan: left promiscuous mode [ 486.660239][ T7196] veth0_vlan: left promiscuous mode [ 486.969737][T12185] netlink: 'syz.4.1664': attribute type 30 has an invalid length. [ 487.026530][T12185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.047737][T12185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.743102][ T9] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 487.912165][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 487.960701][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.020502][ T9] usb 4-1: Product: syz [ 488.038992][ T9] usb 4-1: Manufacturer: syz [ 488.083046][ T9] usb 4-1: SerialNumber: syz [ 488.109315][ T9] usb 4-1: config 0 descriptor?? [ 488.192818][ T5898] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 488.344698][T12202] usb usb8: usbfs: process 12202 (syz.1.1667) did not claim interface 6 before use [ 488.363956][ T5898] usb 6-1: config 0 has an invalid interface number: 58 but max is 0 [ 488.372395][ T5898] usb 6-1: config 0 has no interface number 0 [ 488.378830][ T5898] usb 6-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=49.f8 [ 488.622200][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.652074][ T5898] usb 6-1: config 0 descriptor?? [ 488.665984][ T5898] gspca_main: spca500-2.14.0 probing 041e:400a [ 488.785939][ T7196] team0 (unregistering): Port device team_slave_1 removed [ 488.972385][ T7196] team0 (unregistering): Port device team_slave_0 removed [ 489.784241][T12210] FAULT_INJECTION: forcing a failure. [ 489.784241][T12210] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 489.803821][T12210] CPU: 0 UID: 0 PID: 12210 Comm: syz.1.1669 Not tainted syzkaller #0 PREEMPT(full) [ 489.803845][T12210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 489.803857][T12210] Call Trace: [ 489.803865][T12210] [ 489.803876][T12210] dump_stack_lvl+0x189/0x250 [ 489.803907][T12210] ? __pfx____ratelimit+0x10/0x10 [ 489.803932][T12210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.803955][T12210] ? __pfx__printk+0x10/0x10 [ 489.803986][T12210] should_fail_ex+0x414/0x560 [ 489.804016][T12210] iommufd_get_object+0x78/0x4b0 [ 489.804044][T12210] ? __pfx_iommufd_get_object+0x10/0x10 [ 489.804076][T12210] iommufd_ioas_map+0x283/0x4c0 [ 489.804107][T12210] ? __pfx_iommufd_ioas_map+0x10/0x10 [ 489.804139][T12210] iommufd_fops_ioctl+0x45e/0x580 [ 489.804176][T12210] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 489.804212][T12210] ? __fget_files+0x3a0/0x420 [ 489.804229][T12210] ? __fget_files+0x2a/0x420 [ 489.804248][T12210] ? bpf_lsm_file_ioctl+0x9/0x20 [ 489.804268][T12210] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 489.804292][T12210] __se_sys_ioctl+0xfc/0x170 [ 489.804317][T12210] do_syscall_64+0xfa/0xfa0 [ 489.804339][T12210] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.804363][T12210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.804381][T12210] ? clear_bhb_loop+0x60/0xb0 [ 489.804403][T12210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.804420][T12210] RIP: 0033:0x7f68ee38f6c9 [ 489.804436][T12210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.804452][T12210] RSP: 002b:00007f68ef243038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 489.804472][T12210] RAX: ffffffffffffffda RBX: 00007f68ee5e5fa0 RCX: 00007f68ee38f6c9 [ 489.804486][T12210] RDX: 0000200000000040 RSI: 0000000000003b85 RDI: 0000000000000003 [ 489.804498][T12210] RBP: 00007f68ef243090 R08: 0000000000000000 R09: 0000000000000000 [ 489.804511][T12210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.804522][T12210] R13: 00007f68ee5e6038 R14: 00007f68ee5e5fa0 R15: 00007f68ee70fa28 [ 489.804552][T12210] [ 489.821480][T12212] input: syz0 as /devices/virtual/input/input57 [ 489.965613][ T9] usb 4-1: f81604_read: reg: 100f failed: -EPROTO [ 490.243987][T12223] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1672'. [ 491.129138][ T9] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 491.159331][ T9] usb 4-1: USB disconnect, device number 88 [ 491.228237][ T9] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 491.360213][ T9] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 491.506488][ T10] usb 6-1: USB disconnect, device number 52 [ 491.598493][T12235] netlink: 'syz.5.1676': attribute type 13 has an invalid length. [ 491.762977][ T9] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 491.915625][ T9] usb 4-1: config 0 has an invalid interface number: 58 but max is 0 [ 491.924251][ T9] usb 4-1: config 0 has no interface number 0 [ 491.930479][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=49.f8 [ 491.942652][T12235] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.949827][T12235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.208674][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.256479][ T9] usb 4-1: config 0 descriptor?? [ 492.380588][ T9] gspca_main: spca500-2.14.0 probing 041e:400a [ 493.420969][T12264] netlink: 'syz.1.1681': attribute type 10 has an invalid length. [ 493.464158][T12264] bond1: (slave dummy0): Releasing active interface [ 493.862357][ T9] usb 4-1: USB disconnect, device number 89 [ 494.115992][T12279] input: syz0 as /devices/virtual/input/input58 [ 494.180605][T12268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1682'. [ 494.284759][T12268] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 494.411830][T12294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.435709][T12292] vlan1: entered promiscuous mode [ 494.456528][T12292] vlan1: entered allmulticast mode [ 494.461664][T12292] veth0_vlan: entered allmulticast mode [ 494.473107][T12294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.880044][ T5898] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 495.062767][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 495.079971][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 495.099423][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 495.114397][ T5898] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 495.123821][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.138843][ T5898] usb 4-1: Product: syz [ 495.147894][ T5898] usb 4-1: Manufacturer: syz [ 495.432446][ T5898] usb 4-1: SerialNumber: syz [ 495.453251][ T5898] usb 4-1: config 0 descriptor?? [ 495.478721][ T5898] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 495.508507][ T5898] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 495.515652][ T24] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 495.697337][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.732685][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.772850][ T24] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 495.809196][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.858386][ T24] usb 6-1: config 0 descriptor?? [ 495.996409][T12327] hub 9-0:1.0: USB hub found [ 496.001353][T12327] hub 9-0:1.0: 1 port detected [ 496.128723][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1691'. [ 496.148628][T12329] erspan0: entered promiscuous mode [ 496.167588][T12329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.176803][T12329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.204635][ T5898] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 496.245592][ T5898] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 496.385903][ T30] audit: type=1400 audit(1762825070.030:652): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=12330 comm="syz.0.1692" [ 496.538713][ T30] audit: type=1800 audit(1762825070.190:653): pid=12334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1690" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 496.738180][ T24] cypress 0003:04B4:DE61.0015: unknown main item tag 0x0 [ 496.785041][ T24] cypress 0003:04B4:DE61.0015: unknown main item tag 0x0 [ 496.912147][ T5898] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 496.920190][ T5898] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 496.976752][ T5898] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 496.992224][ T5898] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 497.016911][ T24] cypress 0003:04B4:DE61.0015: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.5-1/input0 [ 497.032424][ T5898] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 497.780244][ T5898] usb 4-1: USB disconnect, device number 90 [ 497.895689][T12362] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 498.871714][ T24] usb 6-1: USB disconnect, device number 53 [ 498.992313][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1703'. [ 499.005747][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1703'. [ 499.016321][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1703'. [ 499.060228][ T30] audit: type=1804 audit(1762825072.710:654): pid=12379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1702" name="/newroot/338/file1" dev="fuse" ino=1 res=1 errno=0 [ 499.141721][T12387] tap0: tun_chr_ioctl cmd 1074025677 [ 499.147816][T12387] tap0: linktype set to 825 [ 499.154068][T12387] netlink: 'syz.1.1704': attribute type 10 has an invalid length. [ 499.184110][T12387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.198298][T12387] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 499.209304][T12391] netlink: 'syz.1.1704': attribute type 10 has an invalid length. [ 499.217495][ T5898] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 499.225965][T12391] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1704'. [ 499.236537][T12391] batadv0: entered promiscuous mode [ 499.241759][T12391] batadv0: entered allmulticast mode [ 499.249408][T12391] bond0: (slave batadv0): Releasing backup interface [ 499.265005][T12391] bridge0: port 3(batadv0) entered blocking state [ 499.271805][T12391] bridge0: port 3(batadv0) entered disabled state [ 499.333663][ T1159] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 499.342716][ T24] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 499.343274][ T1159] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 499.397801][ T5898] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 499.412765][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.420965][ T5898] usb 4-1: Product: syz [ 499.425845][ T5898] usb 4-1: Manufacturer: syz [ 499.430473][ T5898] usb 4-1: SerialNumber: syz [ 499.453513][ T5898] usb 4-1: config 0 descriptor?? [ 499.521183][ T24] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 499.549937][ T24] usb 6-1: config 1 has no interface number 0 [ 499.569315][ T24] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 499.588457][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.609646][ T24] usb 6-1: Product: syz [ 499.618524][ T24] usb 6-1: Manufacturer: syz [ 499.627880][ T24] usb 6-1: SerialNumber: syz [ 499.647375][ T24] usb 6-1: Error in usbnet_get_endpoints (-22) [ 499.848093][T12388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.893193][T12388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.920979][T12388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.937359][ T5898] usb 4-1: Firmware version (0.0) predates our first public release. [ 499.946548][ T5898] usb 4-1: Please update to version 0.2 or newer [ 499.955238][T12388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.982206][T12388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.005579][T12388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.015487][ T5898] usb 4-1: USB disconnect, device number 91 [ 500.106366][T12388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.122060][T12388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.226570][ T5828] usb 6-1: USB disconnect, device number 54 [ 500.427709][ T24] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 500.624523][ T24] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 500.633012][ T24] usb 2-1: config 6 has no interface number 0 [ 500.639112][ T24] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 500.652712][ T24] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 500.863981][ T24] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 500.893854][ T24] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 500.982699][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.992715][ T5828] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 501.021312][ T24] usb 2-1: Product: syz [ 501.025782][ T24] usb 2-1: Manufacturer: syz [ 501.030397][ T24] usb 2-1: SerialNumber: syz [ 501.123596][ T5828] usb 4-1: device descriptor read/64, error -71 [ 501.212039][ T24] hso 2-1:6.2: Failed to find INT IN ep [ 501.380544][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.386897][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.399964][ T5828] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 501.629194][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1715'. [ 501.638898][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1715'. [ 501.647942][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1715'. [ 501.662730][ T5828] usb 4-1: device descriptor read/64, error -71 [ 501.773175][ T5828] usb usb4-port1: attempt power cycle [ 501.876386][ T30] audit: type=1804 audit(1762825075.530:655): pid=12428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1716" name="/newroot/248/file1" dev="fuse" ino=1 res=1 errno=0 [ 501.896922][ C1] vkms_vblank_simulate: vblank timer overrun [ 502.112751][ T5828] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 502.135259][ T5828] usb 4-1: device descriptor read/8, error -71 [ 502.282255][T12434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.289727][T12434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.297995][T12434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.305816][T12434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.382765][ T5828] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 502.504455][ T5828] usb 4-1: device descriptor read/8, error -71 [ 502.629842][ T5828] usb usb4-port1: unable to enumerate USB device [ 503.009100][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 503.393161][ T9] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 503.563344][ T9] usb 2-1: USB disconnect, device number 113 [ 504.052935][ T918] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 504.078578][T12453] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1723'. [ 504.093477][T12453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1723'. [ 504.384307][ T918] usb 2-1: config 0 has an invalid interface number: 58 but max is 0 [ 504.392526][ T918] usb 2-1: config 0 has no interface number 0 [ 504.429541][ T918] usb 2-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=49.f8 [ 504.449384][ T918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.480507][ T918] usb 2-1: config 0 descriptor?? [ 504.527769][T12463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1718'. [ 504.604673][ T918] gspca_main: spca500-2.14.0 probing 041e:400a [ 504.638231][T12463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.647588][T12463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.309214][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1726'. [ 505.351774][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1726'. [ 505.442810][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1726'. [ 506.093973][T12475] netlink: 'syz.0.1727': attribute type 20 has an invalid length. [ 506.876863][ T918] usb 2-1: USB disconnect, device number 114 [ 507.429812][T12489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1731'. [ 508.245058][T12510] netlink: 'syz.4.1735': attribute type 30 has an invalid length. [ 509.289664][T12518] loop2: detected capacity change from 0 to 7 [ 509.339065][T12518] loop2: [POWERTEC] p1 p2 p3 p4 [ 509.346423][T12518] loop2: p2 start 4294967287 is beyond EOD, truncated [ 509.367655][T12518] loop2: p3 start 1932423285 is beyond EOD, truncated [ 509.391368][T12518] loop2: p4 size 1986356271 extends beyond EOD, truncated [ 509.522024][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 509.554816][ T6435] udevd[6435]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 509.864143][T12523] tipc: Failed to remove unknown binding: 66,1,1/0:3476277388/3476277390 [ 509.893576][T12523] tipc: Failed to remove unknown binding: 66,1,1/0:3476277388/3476277390 [ 509.941534][T12523] tipc: Failed to remove unknown binding: 66,1,1/0:3476277388/3476277390 [ 510.114486][T12537] usb usb8: usbfs: process 12537 (syz.3.1741) did not claim interface 6 before use [ 510.709345][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1737'. [ 510.734215][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1737'. [ 510.754742][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1737'. [ 511.315636][T12547] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1743'. [ 512.522712][ T10] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 512.954055][T12569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1749'. [ 513.068708][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 513.096225][ T10] usb 4-1: config 0 has an invalid interface number: 199 but max is 0 [ 513.152721][ T10] usb 4-1: config 0 has no interface number 0 [ 513.198652][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=49.f8 [ 513.272033][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.294380][T12578] loop2: detected capacity change from 0 to 7 [ 513.301561][T12578] loop2: [POWERTEC] p1 p2 p3 p4 [ 513.316926][ T10] usb 4-1: Product: syz [ 513.321098][ T10] usb 4-1: Manufacturer: syz [ 513.356851][ T10] usb 4-1: SerialNumber: syz [ 513.357098][T12578] loop2: p2 start 4294967287 is beyond EOD, truncated [ 513.404429][ T10] usb 4-1: config 0 descriptor?? [ 513.421429][T12578] loop2: p3 start 1932423285 is beyond EOD, truncated [ 513.483996][T12578] loop2: p4 size 1986356271 extends beyond EOD, truncated [ 513.633149][ T5836] udevd[5836]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 513.675551][ T6435] udevd[6435]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 513.775697][T12586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.823199][T12586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.144647][T12595] netlink: 576 bytes leftover after parsing attributes in process `syz.5.1754'. [ 514.188958][T12595] netlink: 576 bytes leftover after parsing attributes in process `syz.5.1754'. [ 514.784469][ T10] usb 4-1: USB disconnect, device number 96 [ 514.933634][T12618] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1757'. [ 515.142356][T12628] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 515.164834][T12628] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 515.249420][T12630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1759'. [ 515.278014][T12630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1759'. [ 515.334392][T12618] vlan2: entered allmulticast mode [ 515.340105][T12618] hsr0: entered allmulticast mode [ 515.346177][T12618] hsr_slave_0: entered allmulticast mode [ 515.370258][T12618] hsr_slave_1: entered allmulticast mode [ 515.717488][T12643] pimreg: entered allmulticast mode [ 515.744778][T12643] pimreg: left allmulticast mode [ 515.985671][T12657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.113030][T12658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.134220][T12658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.153573][ T5828] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 516.196536][T12657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.249735][ T30] audit: type=1326 audit(1762825089.900:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12655 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa233f8f6c9 code=0x7ffc0000 [ 516.290731][ T30] audit: type=1326 audit(1762825089.900:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12655 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa233f8f6c9 code=0x7ffc0000 [ 516.355499][ T30] audit: type=1326 audit(1762825089.930:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12655 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa233f2b779 code=0x7ffc0000 [ 516.365208][ T5828] usb 4-1: config 0 has an invalid interface number: 58 but max is 0 [ 516.438052][ T30] audit: type=1326 audit(1762825089.930:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12655 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa233f2b779 code=0x7ffc0000 [ 516.452694][ T5828] usb 4-1: config 0 has no interface number 0 [ 516.498677][T12663] binder: 12660:12663 ioctl c018620c 2000000002c0 returned -1 [ 516.544363][ T5828] usb 4-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=49.f8 [ 516.571650][ T30] audit: type=1326 audit(1762825089.930:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12655 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa233f8f6c9 code=0x7ffc0000 [ 516.793593][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.825764][ T5828] usb 4-1: config 0 descriptor?? [ 516.854284][ T5828] gspca_main: spca500-2.14.0 probing 041e:400a [ 517.011837][ T30] audit: type=1326 audit(1762825089.930:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12655 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa233f2b779 code=0x7ffc0000 [ 517.351337][ T30] audit: type=1326 audit(1762825089.930:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12655 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa233f2b779 code=0x7ffc0000 [ 517.433278][ T30] audit: type=1326 audit(1762825089.930:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12655 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa233f8f6c9 code=0x7ffc0000 [ 517.455783][ T30] audit: type=1326 audit(1762825089.930:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12655 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa233f2b779 code=0x7ffc0000 [ 517.478183][ T30] audit: type=1326 audit(1762825089.930:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12655 comm="syz.4.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa233f2b779 code=0x7ffc0000 [ 517.859951][T12679] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.958641][ T10] usb 4-1: USB disconnect, device number 97 [ 519.346834][T12695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1774'. [ 519.655676][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 519.857776][T12702] loop2: detected capacity change from 0 to 7 [ 519.878495][ T6435] loop2: [POWERTEC] p1 p2 p3 p4 [ 519.900713][ T6435] loop2: p2 start 4294967287 is beyond EOD, truncated [ 519.937219][ T6435] loop2: p3 start 1932423285 is beyond EOD, truncated [ 519.949712][ T6435] loop2: p4 size 1986356271 extends beyond EOD, truncated [ 519.975817][T12702] loop2: [POWERTEC] p1 p2 p3 p4 [ 520.010821][T12702] loop2: p2 start 4294967287 is beyond EOD, truncated [ 520.104617][T12702] loop2: p3 start 1932423285 is beyond EOD, truncated [ 520.112156][T12702] loop2: p4 size 1986356271 extends beyond EOD, truncated [ 520.254744][ T5828] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 520.356078][ T6435] udevd[6435]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 520.369472][ T5836] udevd[5836]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 520.424138][ T5828] usb 6-1: Using ep0 maxpacket: 8 [ 520.431537][ T5828] usb 6-1: config 0 has an invalid interface number: 246 but max is 0 [ 520.456368][ T5828] usb 6-1: config 0 has no interface number 0 [ 520.462545][ T5828] usb 6-1: config 0 interface 246 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 520.548148][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 520.561425][ T6435] udevd[6435]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 520.571621][ T5828] usb 6-1: config 0 interface 246 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 520.591075][ T5828] usb 6-1: New USB device found, idVendor=2001, idProduct=3a00, bcdDevice=e4.3b [ 520.603993][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.660567][ T5828] usb 6-1: Product: syz [ 520.671894][ T5828] usb 6-1: Manufacturer: syz [ 520.681086][ T5828] usb 6-1: SerialNumber: syz [ 520.693098][ T5828] usb 6-1: config 0 descriptor?? [ 520.705822][ T5828] usb 6-1: Could not find all expected endpoints [ 520.828676][T12735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1784'. [ 520.837914][T12735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1784'. [ 520.860633][T12735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1784'. [ 520.886574][T12735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1784'. [ 521.264049][T12743] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 521.312789][T12743] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1785'. [ 521.465503][ T116] usb 6-1: USB disconnect, device number 55 [ 522.022910][ T116] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 522.194634][ T116] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 522.203984][ T116] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 522.221329][ T116] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 522.260689][ T116] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 522.286318][ T116] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 522.326067][ T116] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 522.335879][ T116] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 522.351062][T12759] loop2: detected capacity change from 0 to 7 [ 522.358606][ T116] usb 6-1: Product: syz [ 522.365102][T12759] loop2: [POWERTEC] p1 p2 p3 p4 [ 522.370253][ T116] usb 6-1: Manufacturer: syz [ 522.378308][T12759] loop2: p2 start 4294967287 is beyond EOD, truncated [ 522.386493][T12759] loop2: p3 start 1932423285 is beyond EOD, truncated [ 522.398741][ T116] cdc_wdm 6-1:1.0: skipping garbage [ 522.410999][T12761] batman_adv: batadv0: Adding interface: gretap1 [ 522.419253][T12761] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.445702][ T116] cdc_wdm 6-1:1.0: skipping garbage [ 522.452297][T12759] loop2: p4 size 1986356271 extends beyond EOD, truncated [ 522.460257][T12761] batman_adv: batadv0: Interface activated: gretap1 [ 522.471018][ T116] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 522.477847][ T116] cdc_wdm 6-1:1.0: Unknown control protocol [ 522.655764][T12761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.665318][T12761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.840272][ T5836] udevd[5836]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 522.852153][ T6435] udevd[6435]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 522.935492][T12763] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 523.337125][ T116] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 523.469218][T12783] usb usb8: usbfs: process 12783 (syz.4.1798) did not claim interface 6 before use [ 523.529168][ T24] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 523.562758][ T116] usb 2-1: Using ep0 maxpacket: 32 [ 523.570669][ T116] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 523.587053][ T116] usb 2-1: config 0 has an invalid descriptor of length 227, skipping remainder of the config [ 523.610314][ T116] usb 2-1: config 0 has no interface number 0 [ 523.630403][ T116] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 24 [ 523.682402][ T116] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 523.710785][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 523.721290][ T116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.738688][ T24] usb 4-1: too many configurations: 80, using maximum allowed: 8 [ 523.759359][ T116] usb 2-1: Product: syz [ 523.778394][ T116] usb 2-1: Manufacturer: syz [ 523.793434][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 523.806370][ T116] usb 2-1: SerialNumber: syz [ 523.830307][ T24] usb 4-1: can't read configurations, error -61 [ 523.905998][ T116] usb 2-1: config 0 descriptor?? [ 524.059627][ T24] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 524.312726][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 524.318805][ T24] usb 4-1: too many configurations: 80, using maximum allowed: 8 [ 524.351235][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 524.364395][ T24] usb 4-1: can't read configurations, error -61 [ 524.394512][T12786] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1794'. [ 524.429021][ T24] usb usb4-port1: attempt power cycle [ 524.852782][ T24] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 524.874771][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 524.889185][ T24] usb 4-1: too many configurations: 80, using maximum allowed: 8 [ 524.905939][T12786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.921212][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 524.965071][T12786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.986647][T12786] bond0 (unregistering): Released all slaves [ 525.006149][ T24] usb 4-1: can't read configurations, error -61 [ 525.070692][ T9] usb 6-1: USB disconnect, device number 56 [ 525.148030][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 525.185916][ T24] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 525.243610][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 525.258306][ T24] usb 4-1: too many configurations: 80, using maximum allowed: 8 [ 525.288392][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 525.318478][ T24] usb 4-1: can't read configurations, error -61 [ 525.345018][ T24] usb usb4-port1: unable to enumerate USB device [ 525.365956][T12795] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.778971][T12813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.793702][T12813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.045264][ T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 526.269949][ T116] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 526.280060][ T116] usb 2-1: qt2_attach - failed to power on unit: -71 [ 526.295586][ T9] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 526.338055][ T116] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 526.338328][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.396906][ T116] usb 2-1: USB disconnect, device number 115 [ 526.498728][ T9] usb 6-1: config 0 has no interface number 0 [ 526.569770][ T9] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 526.641998][ T9] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 526.683515][ T9] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 526.819164][ T9] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 526.831434][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.852533][T12825] netlink: 'syz.1.1810': attribute type 2 has an invalid length. [ 526.870731][T12825] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.1810'. [ 526.882247][ T9] usb 6-1: config 0 descriptor?? [ 526.893092][T12807] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 526.912860][ T9] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 527.021225][T12831] loop2: detected capacity change from 0 to 7 [ 527.035330][ T5836] loop2: [POWERTEC] p1 p2 p3 p4 [ 527.041768][ T5836] loop2: p2 start 4294967287 is beyond EOD, truncated [ 527.048934][ T5836] loop2: p3 start 1932423285 is beyond EOD, truncated [ 527.056329][ T5836] loop2: p4 size 1986356271 extends beyond EOD, truncated [ 527.149623][T12831] loop2: [POWERTEC] p1 p2 p3 p4 [ 527.162427][T12831] loop2: p2 start 4294967287 is beyond EOD, truncated [ 527.169844][T12831] loop2: p3 start 1932423285 is beyond EOD, truncated [ 527.177878][T12831] loop2: p4 size 1986356271 extends beyond EOD, truncated [ 527.284937][ T6435] udevd[6435]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 527.309558][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 527.406938][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 527.423750][ T6435] udevd[6435]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 528.004644][ T1159] usb 6-1: Failed to submit usb control message: -110 [ 528.011822][ T1159] usb 6-1: unable to send the bmi data to the device: -110 [ 528.065319][ T1159] usb 6-1: unable to get target info from device [ 528.102788][ T1159] usb 6-1: could not get target info (-110) [ 528.158825][ T1159] usb 6-1: could not probe fw (-110) [ 528.217954][T12847] tipc: Enabled bearer , priority 0 [ 528.230207][T12847] syzkaller0: entered promiscuous mode [ 528.236935][T12847] syzkaller0: entered allmulticast mode [ 528.262103][T12847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1817'. [ 528.289587][T12847] [†’Ì: entered promiscuous mode [ 528.336246][T12847] tipc: Resetting bearer [ 528.352092][T12846] tipc: Resetting bearer [ 528.374043][T12846] tipc: Disabling bearer [ 528.498804][ T116] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 528.683087][ T24] usb 6-1: USB disconnect, device number 57 [ 528.702711][ T116] usb 2-1: Using ep0 maxpacket: 16 [ 528.730965][ T116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.749149][ T116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.768269][ T116] usb 2-1: New USB device found, idVendor=6160, idProduct=4d15, bcdDevice= 0.00 [ 528.777803][ T116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.801086][T12863] ip6gretap0: entered promiscuous mode [ 528.862137][ T116] usb 2-1: config 0 descriptor?? [ 528.868060][T12863] vlan2: entered promiscuous mode [ 529.062506][T12873] input: syz0 as /devices/virtual/input/input59 [ 529.192801][ T24] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 529.236316][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'. [ 529.250237][T12876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.329260][ T116] hid-generic 0003:6160:4D15.0017: unknown main item tag 0x0 [ 529.339223][ T116] hid-generic 0003:6160:4D15.0017: unknown main item tag 0x0 [ 529.347414][T12876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.361032][ T116] hid-generic 0003:6160:4D15.0017: unknown main item tag 0x0 [ 529.368918][ T24] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 529.379260][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.387777][ T24] usb 6-1: Product: syz [ 529.391992][ T24] usb 6-1: Manufacturer: syz [ 529.398192][ T24] usb 6-1: SerialNumber: syz [ 529.404171][ T116] hid-generic 0003:6160:4D15.0017: unknown main item tag 0x0 [ 529.414587][ T116] hid-generic 0003:6160:4D15.0017: unknown main item tag 0x0 [ 529.423255][ T24] usb 6-1: config 0 descriptor?? [ 529.428455][ T116] hid-generic 0003:6160:4D15.0017: unknown main item tag 0x0 [ 529.439740][ T116] hid-generic 0003:6160:4D15.0017: unknown main item tag 0x0 [ 529.449172][ T116] hid-generic 0003:6160:4D15.0017: unknown main item tag 0x0 [ 529.487828][ T116] hid-generic 0003:6160:4D15.0017: unknown main item tag 0x0 [ 529.495733][ T116] hid-generic 0003:6160:4D15.0017: unknown main item tag 0x0 [ 529.531868][ T116] hid-generic 0003:6160:4D15.0017: hidraw0: USB HID v0.00 Device [HID 6160:4d15] on usb-dummy_hcd.1-1/input0 [ 530.269577][T12892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.279147][T12892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.287007][ T918] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 530.367314][T12894] binder: 12893:12894 ioctl c0306201 200000000540 returned -14 [ 530.452971][ T918] usb 4-1: config 255 has too many interfaces: 249, using maximum allowed: 32 [ 530.464736][ T918] usb 4-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config [ 530.475400][ T918] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 249 [ 530.483748][ T24] usb 6-1: Firmware version (0.0) predates our first public release. [ 530.524884][ T918] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 530.534213][ T24] usb 6-1: Please update to version 0.2 or newer [ 530.546300][ T918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.565832][ T918] usb 4-1: Product: syz [ 530.570137][ T918] usb 4-1: Manufacturer: syz [ 530.584361][ T918] usb 4-1: SerialNumber: syz [ 530.617795][ T24] usb 6-1: USB disconnect, device number 58 [ 530.875315][T12900] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1830'. [ 531.097782][T12910] fuse: Bad value for 'fd' [ 531.420563][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1834'. [ 531.455846][T12915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 531.508522][ T918] usb 2-1: USB disconnect, device number 116 [ 531.962807][ T918] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 532.176768][ T918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.195769][ T918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.232046][ T918] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 532.298787][ T918] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 532.317952][ T918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.350659][ T918] usb 2-1: config 0 descriptor?? [ 532.434394][T12924] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1836'. [ 532.530256][ T5828] usb 4-1: USB disconnect, device number 102 [ 532.633670][ T9] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 532.719851][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'. [ 532.731686][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'. [ 532.742215][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'. [ 532.792767][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 532.807597][ T918] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 532.830803][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.856513][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.871927][ T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 532.881359][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.894125][ T9] usb 6-1: config 0 descriptor?? [ 533.247062][ T24] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 533.383794][ T9] hid-picolcd 0003:04D8:F002.0019: No report with id 0xf3 found [ 533.383821][ T9] hid-picolcd 0003:04D8:F002.0019: No report with id 0xf4 found [ 533.421276][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 533.430221][ T24] usb 4-1: config 0 has no interfaces? [ 533.436785][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 533.446596][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 533.459282][ T24] usb 4-1: Manufacturer: syz [ 533.475733][ T24] usb 4-1: config 0 descriptor?? [ 533.571769][T12941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1841'. [ 533.794079][ T24] usb 4-1: USB disconnect, device number 103 [ 534.002063][T12942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.041935][T12942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.087436][ C1] plantronics 0003:047F:FFFF.0018: usb_submit_urb(ctrl) failed: -1 [ 534.100443][ T116] usb 2-1: USB disconnect, device number 117 [ 534.597052][ T918] usb 6-1: reset high-speed USB device number 59 using dummy_hcd [ 534.867738][T12954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1846'. [ 535.243141][ T24] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 535.246928][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1850'. [ 535.262140][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1850'. [ 535.755806][ T24] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 535.764266][ T24] usb 4-1: config 0 has no interface number 0 [ 535.770473][ T24] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 535.784679][ T24] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 535.804902][ T24] usb 4-1: config 0 interface 113 has no altsetting 0 [ 535.825167][ T24] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 535.834332][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.852525][ T24] usb 4-1: Product: syz [ 535.856849][ T24] usb 4-1: Manufacturer: syz [ 535.861524][ T24] usb 4-1: SerialNumber: syz [ 535.871670][ T9] usb 6-1: USB disconnect, device number 59 [ 535.906839][ T24] usb 4-1: config 0 descriptor?? [ 535.927480][ C1] usb 4-1: NFC: Urb failure (status -71) [ 535.934332][ T24] usb 4-1: NFC: Unable to get FW version [ 535.941577][ T24] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 536.060565][T12984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.092457][T12984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.225908][ T30] kauditd_printk_skb: 211 callbacks suppressed [ 537.225924][ T30] audit: type=1326 audit(1762825110.880:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12989 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee38f6c9 code=0x7ffc0000 [ 537.254451][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.281543][ T30] audit: type=1326 audit(1762825110.880:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12989 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee38f6c9 code=0x7ffc0000 [ 537.303899][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.320722][ T30] audit: type=1326 audit(1762825110.930:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12989 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f68ee38f6c9 code=0x7ffc0000 [ 537.343563][ T30] audit: type=1326 audit(1762825110.930:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12989 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee38f6c9 code=0x7ffc0000 [ 537.367719][ T30] audit: type=1326 audit(1762825110.930:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12989 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee38f6c9 code=0x7ffc0000 [ 537.390116][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.399856][ T30] audit: type=1326 audit(1762825110.930:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12989 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f68ee38f6c9 code=0x7ffc0000 [ 537.422199][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.495146][ T30] audit: type=1326 audit(1762825110.930:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12989 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee38f6c9 code=0x7ffc0000 [ 537.607872][ T30] audit: type=1326 audit(1762825110.930:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12989 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68ee38f6c9 code=0x7ffc0000 [ 537.704720][ T30] audit: type=1326 audit(1762825110.930:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12989 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ee38f6c9 code=0x7ffc0000 [ 537.762214][ T30] audit: type=1326 audit(1762825110.930:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12989 comm="syz.1.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f68ee38f6c9 code=0x7ffc0000 [ 537.807963][T13003] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 537.872559][T13007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.931129][T13007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.106636][ T9] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 538.138545][T13011] __nla_validate_parse: 2 callbacks suppressed [ 538.138555][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1861'. [ 538.195345][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1861'. [ 538.212773][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1861'. [ 538.284325][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 538.294464][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 538.310398][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 538.343187][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 538.356086][ T918] usb 4-1: USB disconnect, device number 104 [ 538.376063][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.398879][ T9] usb 2-1: Product: syz [ 538.415166][ T9] usb 2-1: Manufacturer: syz [ 538.427665][ T9] usb 2-1: SerialNumber: syz [ 538.981390][T13021] netlink: 'syz.5.1862': attribute type 20 has an invalid length. [ 539.113427][T13020] netlink: 'syz.3.1863': attribute type 30 has an invalid length. [ 539.363036][ T9] usb 2-1: 0:2 : does not exist [ 539.408562][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 539.614064][ T9] usb 2-1: USB disconnect, device number 118 [ 540.282070][T13032] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 542.123379][T13051] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1871'. [ 542.989737][T13060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1874'. [ 543.022808][T13060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1874'. [ 543.848658][T13060] team0: entered promiscuous mode [ 544.026572][T13060] debugfs: 'hsr1' already exists in 'hsr' [ 544.063206][T13060] Cannot create hsr debugfs directory [ 544.089306][T13060] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 544.140007][T13060] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 544.211901][T13071] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1876'. [ 544.232354][T13071] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1876'. [ 544.312690][T13068] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 544.333400][ T9] IPVS: starting estimator thread 0... [ 544.432976][T13073] IPVS: using max 51 ests per chain, 122400 per kthread [ 545.142359][T13099] usb usb8: usbfs: process 13099 (syz.3.1882) did not claim interface 6 before use [ 545.823321][ T9] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 545.902873][ T5828] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 546.062769][ T5828] usb 6-1: Using ep0 maxpacket: 32 [ 546.075721][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 546.086085][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 546.104264][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.115278][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.128626][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 546.142731][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 546.148262][ T5828] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 546.170206][ T9] usb 2-1: Product: syz [ 546.178881][ T9] usb 2-1: Manufacturer: syz [ 546.190465][ T9] usb 2-1: SerialNumber: syz [ 546.205904][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.221839][ T9] usb 2-1: config 0 descriptor?? [ 546.251561][ T5828] usb 6-1: config 0 descriptor?? [ 546.255457][ T9] usb 2-1: selecting invalid altsetting 0 [ 546.272229][ T5828] hub 6-1:0.0: USB hub found [ 546.482037][ T5828] hub 6-1:0.0: 26 ports detected [ 546.504349][ T5828] hub 6-1:0.0: insufficient power available to use all downstream ports [ 546.530723][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1892'. [ 546.549288][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1892'. [ 546.579636][ T24] usb 2-1: USB disconnect, device number 119 [ 546.895828][T13131] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=304311770 (19475953280 ns) > initial count (7381606656 ns). Using initial count to start timer. [ 546.917993][T13114] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=304311770 (19475953280 ns) > initial count (7381606656 ns). Using initial count to start timer. [ 547.006760][ T5828] usb 6-1: USB disconnect, device number 60 [ 547.462568][T13137] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 549.024293][ T24] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 549.168710][T13168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.182856][T13168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.322821][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 549.376140][ T24] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 549.396986][ T24] usb 4-1: config 0 has no interface number 0 [ 549.406882][ T24] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 549.420570][ T24] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 549.434102][ T24] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 549.445497][ T24] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 549.503718][ T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 549.547728][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.576132][ T24] usb 4-1: config 0 descriptor?? [ 549.636422][ T24] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 549.662819][T13175] program syz.0.1901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 550.718957][T13188] xt_TCPMSS: Only works on TCP SYN packets [ 550.993058][ T24] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 551.164396][ T24] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 551.196545][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.245434][ T24] usb 2-1: config 0 descriptor?? [ 551.455270][ T24] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 551.663671][ T24] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 551.681718][ T24] [drm] Initialized udl on minor 2 [ 551.743042][T13202] binder: 13201:13202 ioctl 80049370 200000000180 returned -22 [ 551.761983][T13202] binder: 13201:13202 ioctl ae45 5 returned -22 [ 551.791581][T13202] binder: 13201:13202 ioctl c0306201 2000000002c0 returned -14 [ 551.858465][ T24] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 551.905353][ T24] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 551.931640][T13189] FAULT_INJECTION: forcing a failure. [ 551.931640][T13189] name failslab, interval 1, probability 0, space 0, times 0 [ 551.945735][ T5828] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 551.956311][ T5828] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 551.995045][T13189] CPU: 1 UID: 0 PID: 13189 Comm: syz.1.1905 Not tainted syzkaller #0 PREEMPT(full) [ 551.995070][T13189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 551.995081][T13189] Call Trace: [ 551.995088][T13189] [ 551.995097][T13189] dump_stack_lvl+0x189/0x250 [ 551.995124][T13189] ? __pfx____ratelimit+0x10/0x10 [ 551.995148][T13189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 551.995164][T13189] ? __pfx__printk+0x10/0x10 [ 551.995179][T13189] ? __pfx___might_resched+0x10/0x10 [ 551.995198][T13189] should_fail_ex+0x414/0x560 [ 551.995216][T13189] should_failslab+0xa8/0x100 [ 551.995228][T13189] __kmalloc_noprof+0xcb/0x7f0 [ 551.995241][T13189] ? rcu_read_lock_any_held+0xb3/0x120 [ 551.995253][T13189] ? kernfs_fop_write_iter+0x158/0x540 [ 551.995263][T13189] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 551.995277][T13189] kernfs_fop_write_iter+0x158/0x540 [ 551.995291][T13189] vfs_write+0x5c9/0xb30 [ 551.995307][T13189] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 551.995317][T13189] ? __pfx_vfs_write+0x10/0x10 [ 551.995336][T13189] ? __fget_files+0x2a/0x420 [ 551.995350][T13189] ksys_write+0x145/0x250 [ 551.995364][T13189] ? __pfx_ksys_write+0x10/0x10 [ 551.995379][T13189] ? do_syscall_64+0xbe/0xfa0 [ 551.995395][T13189] do_syscall_64+0xfa/0xfa0 [ 551.995406][T13189] ? lockdep_hardirqs_on+0x9c/0x150 [ 551.995419][T13189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.995429][T13189] ? clear_bhb_loop+0x60/0xb0 [ 551.995441][T13189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.995450][T13189] RIP: 0033:0x7f68ee38f6c9 [ 551.995460][T13189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.995469][T13189] RSP: 002b:00007f68ef222038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 551.995481][T13189] RAX: ffffffffffffffda RBX: 00007f68ee5e6090 RCX: 00007f68ee38f6c9 [ 551.995488][T13189] RDX: 000000000000002f RSI: 0000200000000100 RDI: 0000000000000005 [ 551.995495][T13189] RBP: 00007f68ef222090 R08: 0000000000000000 R09: 0000000000000000 [ 551.995501][T13189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.995508][T13189] R13: 00007f68ee5e6128 R14: 00007f68ee5e6090 R15: 00007f68ee70fa28 [ 551.995524][T13189] [ 552.445919][ T9] usb 4-1: USB disconnect, device number 105 [ 552.504650][T13208] netlink: 'syz.3.1912': attribute type 5 has an invalid length. [ 552.535346][ T9] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 552.598277][T13209] netlink: 'syz.0.1911': attribute type 30 has an invalid length. [ 553.092707][ T24] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 553.092741][ T9] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 553.254430][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.264789][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 553.266578][ T9] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 553.279202][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 553.294422][ T9] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.295244][ T24] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 553.304240][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 553.304284][ T9] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 553.304307][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.313294][ T9] usb 4-1: config 0 descriptor?? [ 553.320282][ T24] usb 6-1: Product: syz [ 553.349447][ T24] usb 6-1: Manufacturer: syz [ 553.354409][ T24] usb 6-1: SerialNumber: syz [ 553.361741][ T24] usb 6-1: config 0 descriptor?? [ 553.534745][T13220] tipc: Enabling of bearer rejected, already enabled [ 553.545832][T13220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.556874][T13220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.571100][T13220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.585448][T13220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.647038][ T24] usb 2-1: USB disconnect, device number 120 [ 553.730653][T13228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1918'. [ 553.739863][T13228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1918'. [ 553.749097][T13228] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1918'. [ 553.815585][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 553.829202][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 553.866090][ T9] usb 4-1: USB disconnect, device number 106 [ 555.161691][T13257] netlink: 'syz.4.1925': attribute type 10 has an invalid length. [ 555.782706][ T9] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 555.834514][ T918] usb 6-1: USB disconnect, device number 61 [ 556.166355][ T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 556.201960][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.232301][ T9] usb 4-1: config 0 descriptor?? [ 556.466750][ T9] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 556.702046][ T9] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 556.713376][ T9] [drm] Initialized udl on minor 2 [ 556.755289][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1936'. [ 556.768179][T13291] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1936'. [ 556.781777][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1936'. [ 556.792073][T13291] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1936'. [ 556.877589][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 556.899701][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 556.911773][ T918] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 556.920117][ T918] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 557.423999][T13295] netlink: 'syz.1.1937': attribute type 20 has an invalid length. [ 558.505078][ T24] usb 4-1: USB disconnect, device number 107 [ 558.902408][T13326] netlink: 'syz.3.1943': attribute type 20 has an invalid length. [ 559.270832][T13329] futex_wake_op: syz.0.1944 tries to shift op by -1; fix this program [ 559.852215][T13344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1947'. [ 559.865302][T13344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1947'. [ 560.322112][T13344] team0: entered promiscuous mode [ 560.339418][T13344] team_slave_0: entered promiscuous mode [ 560.345594][T13344] team_slave_1: entered promiscuous mode [ 560.354943][T13344] batadv1: entered promiscuous mode [ 560.369665][T13344] bridge0: entered promiscuous mode [ 560.376515][T13344] debugfs: 'hsr1' already exists in 'hsr' [ 560.382310][T13344] Cannot create hsr debugfs directory [ 560.500446][T13349] bond2: option all_slaves_active: invalid value (9) [ 560.524829][T13349] bond2 (unregistering): Released all slaves [ 560.844824][ T7195] [ 560.847164][ T7195] ============================================ [ 560.853292][ T7195] WARNING: possible recursive locking detected [ 560.859449][ T7195] syzkaller #0 Not tainted [ 560.863863][ T7195] -------------------------------------------- [ 560.870005][ T7195] kworker/u8:13/7195 is trying to acquire lock: [ 560.876236][ T7195] ffff888023432f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 560.885261][ T7195] [ 560.885261][ T7195] but task is already holding lock: [ 560.892599][ T7195] ffff88802408af30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 560.901628][ T7195] [ 560.901628][ T7195] other info that might help us debug this: [ 560.909662][ T7195] Possible unsafe locking scenario: [ 560.909662][ T7195] [ 560.917093][ T7195] CPU0 [ 560.920373][ T7195] ---- [ 560.923645][ T7195] lock(&hsr->seqnr_lock); [ 560.928155][ T7195] lock(&hsr->seqnr_lock); [ 560.932664][ T7195] [ 560.932664][ T7195] *** DEADLOCK *** [ 560.932664][ T7195] [ 560.940801][ T7195] May be due to missing lock nesting notation [ 560.940801][ T7195] [ 560.949118][ T7195] 13 locks held by kworker/u8:13/7195: [ 560.954559][ T7195] #0: ffff88814d02d948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 560.966115][ T7195] #1: ffffc900058afba0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 560.978880][ T7195] #2: ffffffff8f2cb788 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 560.988346][ T7195] #3: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1e4/0x1510 [ 560.997807][ T7195] #4: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 561.006839][ T7195] #5: ffffffff8df3d700 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 561.016737][ T7195] #6: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 561.025853][ T7195] #7: ffff88802408af30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 561.035312][ T7195] #8: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860 [ 561.044774][ T7195] #9: ffffffff8df3d700 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 561.054671][ T7195] #10: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840 [ 561.063964][ T7195] #11: ffffffff8df3d700 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 561.073945][ T7195] #12: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 561.083144][ T7195] [ 561.083144][ T7195] stack backtrace: [ 561.089015][ T7195] CPU: 0 UID: 0 PID: 7195 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 561.089031][ T7195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 561.089041][ T7195] Workqueue: ipv6_addrconf addrconf_dad_work [ 561.089059][ T7195] Call Trace: [ 561.089066][ T7195] [ 561.089072][ T7195] dump_stack_lvl+0x189/0x250 [ 561.089091][ T7195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.089107][ T7195] ? __pfx__printk+0x10/0x10 [ 561.089123][ T7195] print_deadlock_bug+0x28b/0x2a0 [ 561.089140][ T7195] validate_chain+0x1a3f/0x2140 [ 561.089155][ T7195] ? __lock_acquire+0xab9/0xd20 [ 561.089168][ T7195] ? skb_network_protocol+0x508/0x760 [ 561.089183][ T7195] ? __pfx_skb_network_protocol+0x10/0x10 [ 561.089199][ T7195] __lock_acquire+0xab9/0xd20 [ 561.089218][ T7195] ? hsr_dev_xmit+0x237/0x360 [ 561.089231][ T7195] lock_acquire+0x120/0x360 [ 561.089243][ T7195] ? hsr_dev_xmit+0x237/0x360 [ 561.089257][ T7195] ? __lock_acquire+0xab9/0xd20 [ 561.089270][ T7195] ? hsr_dev_xmit+0x237/0x360 [ 561.089283][ T7195] _raw_spin_lock_bh+0x36/0x50 [ 561.089299][ T7195] ? hsr_dev_xmit+0x237/0x360 [ 561.089312][ T7195] hsr_dev_xmit+0x237/0x360 [ 561.089325][ T7195] ? hsr_dev_xmit+0x2d/0x360 [ 561.089339][ T7195] dev_hard_start_xmit+0x2d7/0x830 [ 561.089357][ T7195] __dev_queue_xmit+0x1b8d/0x3b50 [ 561.089372][ T7195] ? unwind_next_frame+0xa5/0x2390 [ 561.089389][ T7195] ? __dev_queue_xmit+0x27b/0x3b50 [ 561.089405][ T7195] ? __local_bh_enable_ip+0x12d/0x1c0 [ 561.089419][ T7195] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.089437][ T7195] ? __pfx___dev_queue_xmit+0x10/0x10 [ 561.089453][ T7195] ? do_raw_read_unlock+0x3d/0x80 [ 561.089471][ T7195] ? ebt_do_table+0x265b/0x2820 [ 561.089489][ T7195] ? __lock_acquire+0xab9/0xd20 [ 561.089509][ T7195] br_dev_queue_push_xmit+0x6c5/0x890 [ 561.089526][ T7195] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 561.089542][ T7195] ? NF_HOOK+0x9e/0x3c0 [ 561.089556][ T7195] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 561.089571][ T7195] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 561.089585][ T7195] NF_HOOK+0x320/0x3c0 [ 561.089601][ T7195] ? NF_HOOK+0x9e/0x3c0 [ 561.089614][ T7195] ? __pfx_NF_HOOK+0x10/0x10 [ 561.089628][ T7195] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 561.089646][ T7195] br_forward_finish+0xd3/0x130 [ 561.089660][ T7195] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 561.089674][ T7195] ? __pfx_br_forward_finish+0x10/0x10 [ 561.089688][ T7195] ? __pfx_br_forward_finish+0x10/0x10 [ 561.089702][ T7195] NF_HOOK+0x320/0x3c0 [ 561.089716][ T7195] ? NF_HOOK+0x9e/0x3c0 [ 561.089730][ T7195] ? __pfx_NF_HOOK+0x10/0x10 [ 561.089744][ T7195] ? __pfx_br_forward_finish+0x10/0x10 [ 561.089761][ T7195] __br_forward+0x41e/0x600 [ 561.089774][ T7195] ? __pfx_br_forward_finish+0x10/0x10 [ 561.089790][ T7195] ? __pfx___br_forward+0x10/0x10 [ 561.089805][ T7195] ? skb_clone+0x246/0x3a0 [ 561.089820][ T7195] maybe_deliver+0xb5/0x160 [ 561.089836][ T7195] br_flood+0x31a/0x6a0 [ 561.089851][ T7195] ? br_dev_xmit+0x185/0x1840 [ 561.089868][ T7195] br_dev_xmit+0x11b3/0x1840 [ 561.089885][ T7195] ? br_dev_xmit+0x185/0x1840 [ 561.089904][ T7195] ? __pfx_br_dev_xmit+0x10/0x10 [ 561.089920][ T7195] ? validate_xmit_xfrm+0xbf/0x1160 [ 561.089938][ T7195] ? stack_depot_save_flags+0x40/0x860 [ 561.089958][ T7195] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 561.089976][ T7195] ? kasan_save_track+0x4f/0x80 [ 561.089993][ T7195] ? kasan_save_track+0x3e/0x80 [ 561.090009][ T7195] ? __kasan_slab_alloc+0x6c/0x80 [ 561.090030][ T7195] dev_hard_start_xmit+0x2d7/0x830 [ 561.090048][ T7195] __dev_queue_xmit+0x1b8d/0x3b50 [ 561.090065][ T7195] ? __dev_queue_xmit+0x27b/0x3b50 [ 561.090080][ T7195] ? rcu_is_watching+0x15/0xb0 [ 561.090095][ T7195] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 561.090111][ T7195] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 561.090127][ T7195] ? kmalloc_reserve+0xbd/0x290 [ 561.090140][ T7195] ? __pfx___dev_queue_xmit+0x10/0x10 [ 561.090154][ T7195] ? __copy_skb_header+0xa7/0x550 [ 561.090167][ T7195] ? __asan_memcpy+0x40/0x70 [ 561.090183][ T7195] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 561.090197][ T7195] ? __asan_memcpy+0x40/0x70 [ 561.090217][ T7195] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 561.090235][ T7195] ? hsr_addr_subst_dest+0x307/0xac0 [ 561.090251][ T7195] hsr_forward_skb+0x158b/0x2860 [ 561.090270][ T7195] ? hsr_forward_skb+0x9e/0x2860 [ 561.090286][ T7195] ? __pfx_hsr_forward_skb+0x10/0x10 [ 561.090301][ T7195] ? do_raw_spin_lock+0x121/0x290 [ 561.090318][ T7195] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 561.090336][ T7195] ? hsr_dev_xmit+0x237/0x360 [ 561.090349][ T7195] hsr_dev_xmit+0x242/0x360 [ 561.090362][ T7195] ? hsr_dev_xmit+0x2d/0x360 [ 561.090376][ T7195] dev_hard_start_xmit+0x2d7/0x830 [ 561.090394][ T7195] __dev_queue_xmit+0x1b8d/0x3b50 [ 561.090409][ T7195] ? register_lock_class+0x51/0x320 [ 561.090423][ T7195] ? __dev_queue_xmit+0x27b/0x3b50 [ 561.090442][ T7195] ? __pfx___dev_queue_xmit+0x10/0x10 [ 561.090456][ T7195] ? read_seqbegin+0x122/0x250 [ 561.090474][ T7195] ? neigh_connected_output+0x1ea/0x460 [ 561.090491][ T7195] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.090508][ T7195] ? read_seqbegin+0x1ac/0x250 [ 561.090524][ T7195] ? __pfx_read_seqbegin+0x10/0x10 [ 561.090540][ T7195] ? eth_header+0x11b/0x200 [ 561.090553][ T7195] ? __asan_memcpy+0x40/0x70 [ 561.090576][ T7195] ip6_finish_output2+0xfb3/0x1480 [ 561.090598][ T7195] ? __pfx_ip6_finish_output2+0x10/0x10 [ 561.090616][ T7195] ? ip6_mtu+0x7d/0x490 [ 561.090631][ T7195] ? ip6_mtu+0x38c/0x490 [ 561.090646][ T7195] ? ip6_finish_output+0x2ef/0x4e0 [ 561.090661][ T7195] ? ip6_output+0x126/0x550 [ 561.090677][ T7195] ip6_output+0x340/0x550 [ 561.090693][ T7195] ndisc_send_skb+0xbce/0x1510 [ 561.090707][ T7195] ? ndisc_send_skb+0x1e4/0x1510 [ 561.090722][ T7195] ? __pfx_ndisc_send_skb+0x10/0x10 [ 561.090736][ T7195] ? __pfx_dst_output+0x10/0x10 [ 561.090748][ T7195] ? __asan_memcpy+0x40/0x70 [ 561.090766][ T7195] ? mod_delayed_work_on+0x128/0x200 [ 561.090784][ T7195] ndisc_send_ns+0xcb/0x150 [ 561.090798][ T7195] ? __pfx_ndisc_send_ns+0x10/0x10 [ 561.090812][ T7195] ? addrconf_dad_work+0xa04/0x14b0 [ 561.090828][ T7195] addrconf_dad_work+0xaae/0x14b0 [ 561.090843][ T7195] ? __lock_acquire+0xab9/0xd20 [ 561.090857][ T7195] ? __pfx_addrconf_dad_work+0x10/0x10 [ 561.090872][ T7195] ? process_scheduled_works+0x9ef/0x17b0 [ 561.090888][ T7195] ? _raw_spin_unlock_irq+0x23/0x50 [ 561.090902][ T7195] ? process_scheduled_works+0x9ef/0x17b0 [ 561.090916][ T7195] ? process_scheduled_works+0x9ef/0x17b0 [ 561.090929][ T7195] process_scheduled_works+0xae1/0x17b0 [ 561.090950][ T7195] ? __pfx_process_scheduled_works+0x10/0x10 [ 561.090968][ T7195] worker_thread+0x8a0/0xda0 [ 561.090988][ T7195] kthread+0x711/0x8a0 [ 561.091006][ T7195] ? __pfx_worker_thread+0x10/0x10 [ 561.091019][ T7195] ? __pfx_kthread+0x10/0x10 [ 561.091034][ T7195] ? _raw_spin_unlock_irq+0x23/0x50 [ 561.091049][ T7195] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.091065][ T7195] ? __pfx_kthread+0x10/0x10 [ 561.091080][ T7195] ret_from_fork+0x4bc/0x870 [ 561.091093][ T7195] ? __pfx_ret_from_fork+0x10/0x10 [ 561.091108][ T7195] ? __switch_to_asm+0x39/0x70 [ 561.091118][ T7195] ? __switch_to_asm+0x33/0x70 [ 561.091129][ T7195] ? __pfx_kthread+0x10/0x10 [ 561.091144][ T7195] ret_from_fork_asm+0x1a/0x30 [ 561.091160][ T7195] [ 561.796648][T13378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.805346][T13378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.818248][T13379] loop2: detected capacity change from 0 to 7 [ 561.841033][T13379] Dev loop2: unable to read RDB block 7 [ 561.848406][T13379] loop2: AHDI p1 p2 p3 [ 561.879333][T13379] loop2: partition table partially beyond EOD, truncated [ 561.915245][T13379] loop2: p1 start 1601398130 is beyond EOD, truncated [ 561.935216][T13379] loop2: p2 start 1702059890 is beyond EOD, truncated [ 562.122695][ T918] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 562.294035][ T918] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 562.303158][ T918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.312462][T13378] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3965544961 (63448719376 ns) > initial count (51650093520 ns). Using initial count to start timer. [ 562.333312][ T918] usb 4-1: config 0 descriptor?? [ 562.540240][ T918] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 562.751574][ T918] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 562.758402][ T918] [drm] Initialized udl on minor 2 [ 562.807223][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.813671][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.949741][ T918] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 562.957857][ T918] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 562.964987][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 563.992397][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 563.993219][ T24] usb 4-1: USB disconnect, device number 108 [ 564.004751][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes